From 4486fb03c1bf589083d2a57671a30849befcd976 Mon Sep 17 00:00:00 2001 From: ben Date: Tue, 15 Apr 2008 15:00:18 +0000 Subject: Improvement to canEdit() for extenders, which takes into account the canEdit() status of entities the extender is attached to git-svn-id: https://code.elgg.org/elgg/trunk@459 36083f99-b078-4883-b0ff-0f9b5a30f544 --- engine/lib/extender.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/engine/lib/extender.php b/engine/lib/extender.php index 05a86a62e..abf4f087d 100644 --- a/engine/lib/extender.php +++ b/engine/lib/extender.php @@ -186,8 +186,13 @@ $extender = $functionname($extender_id); } else return false; + // If the owner is the specified user, great! They can edit. if ($extender->getOwner() == $user->getGUID()) return true; + // If the user can edit the entity this is attached to, great! They can edit. + if (can_edit_entity($extender->entity_guid,$user->getGUID())) return true; + + // Trigger plugin hooks return trigger_plugin_hook('permissions_check',$type,array('entity' => $entity, 'user' => $user),false); } -- cgit v1.2.3