aboutsummaryrefslogtreecommitdiff
path: root/mod/groups/actions/discussion
diff options
context:
space:
mode:
authorcash <cash@36083f99-b078-4883-b0ff-0f9b5a30f544>2011-03-20 23:34:10 +0000
committercash <cash@36083f99-b078-4883-b0ff-0f9b5a30f544>2011-03-20 23:34:10 +0000
commit346d082dae4da3908f7c7a6b8b9946768e19f5d6 (patch)
tree970a50a0b5dc7eeec6d1d616ea788fdf85534697 /mod/groups/actions/discussion
parent8d8c62f3ed7be6691d76824ae82888aba2bb1616 (diff)
downloadelgg-346d082dae4da3908f7c7a6b8b9946768e19f5d6.tar.gz
elgg-346d082dae4da3908f7c7a6b8b9946768e19f5d6.tar.bz2
Fixes #2974 using canWriteToContainer() to control access to creating group content
git-svn-id: http://code.elgg.org/elgg/trunk@8795 36083f99-b078-4883-b0ff-0f9b5a30f544
Diffstat (limited to 'mod/groups/actions/discussion')
-rw-r--r--mod/groups/actions/discussion/reply/save.php2
-rw-r--r--mod/groups/actions/discussion/save.php2
2 files changed, 2 insertions, 2 deletions
diff --git a/mod/groups/actions/discussion/reply/save.php b/mod/groups/actions/discussion/reply/save.php
index e535856da..109938dbb 100644
--- a/mod/groups/actions/discussion/reply/save.php
+++ b/mod/groups/actions/discussion/reply/save.php
@@ -25,7 +25,7 @@ if (!$topic) {
$user = get_loggedin_user();
$group = $topic->getContainerEntity();
-if (!$group->isMember($user)) {
+if (!$group->canWriteToContainer($user)) {
register_error(elgg_echo('groups:notmember'));
forward(REFERER);
}
diff --git a/mod/groups/actions/discussion/save.php b/mod/groups/actions/discussion/save.php
index 0b5d3b51c..a51775cd6 100644
--- a/mod/groups/actions/discussion/save.php
+++ b/mod/groups/actions/discussion/save.php
@@ -21,7 +21,7 @@ if (!$title || !$desc) {
}
$container = get_entity($container_guid);
-if (!$container || (!$container->isMember() && !$container->canEdit())) {
+if (!$container || !$container->canWriteToContainer()) {
register_error(elgg_echo('discussion:error:permissions'));
forward(REFERER);
}