From 1ab6f7e074ca589b19fe5dfb74b9a1a4a5a504cc Mon Sep 17 00:00:00 2001
From: Fil <fil@rezo.net>
Date: Fri, 3 Nov 2006 19:01:36 +0000
Subject: [PATCH] l'rthographe permet de voir: autoriser('voir'...)
---
ecrire/exec/articles_ortho.php | 2 ++
ecrire/inc/autoriser.php | 3 ++-
2 files changed, 4 insertions(+), 1 deletion(-)
diff --git a/ecrire/exec/articles_ortho.php b/ecrire/exec/articles_ortho.php
index 0c4f9131d2..9d14e7a97a 100644
--- a/ecrire/exec/articles_ortho.php
+++ b/ecrire/exec/articles_ortho.php
@@ -15,6 +15,7 @@ if (!defined("_ECRIRE_INC_VERSION")) return;
include_spip('inc/presentation');
include_spip('inc/distant');
include_spip('inc/ortho');
+include_spip('inc/autoriser');
// http://doc.spip.org/@exec_articles_ortho_dist
function exec_articles_ortho_dist()
@@ -42,6 +43,7 @@ function exec_articles_ortho_dist()
// Lire l'article
//
$id_article = intval($id_article);
+ if (!autoriser('voir', 'article', $id_article)) die('interdit');
$result = spip_query("SELECT * FROM spip_articles WHERE id_article='$id_article'");
diff --git a/ecrire/inc/autoriser.php b/ecrire/inc/autoriser.php
index 0b765d6188..c157bff13b 100644
--- a/ecrire/inc/autoriser.php
+++ b/ecrire/inc/autoriser.php
@@ -150,7 +150,8 @@ function autoriser_voir_dist($faire, $type, $id, $qui, $opt) {
$s = spip_query(
"SELECT statut FROM spip_articles WHERE id_article="._q($id));
$r = spip_fetch_array($s);
- return in_array($r['statut'], array('prop', 'publie'))
+ return
+ in_array($r['statut'], array('prop', 'publie'))
OR spip_num_rows(auteurs_article($id, "id_auteur=".$qui['id_auteur']));
}
--
GitLab