AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix permission issue when changing the url manually

Browse Source
This commit is contained in:
Frederic Guillot
2015-08-07 18:07:19 -04:00
parent 2ffafaac7e
commit 2d5621af2f
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@@ -20,6 +20,7 @@ Bug fixes:
* Wrong template name for subtasks tooltip due to previous refactoring * Wrong template name for subtasks tooltip due to previous refactoring
* Fix broken url for closed tasks in project view * Fix broken url for closed tasks in project view
* Fix permission issue when changing the url manually
Version 1.0.17 Version 1.0.17
-------------- --------------

5
app/Controller/Base.php
View File

@@ -269,12 +269,17 @@ abstract class Base extends \Core\Base
*/ */
protected function getTask() protected function getTask()
{ {
$project_id = $this->request->getIntegerParam('project_id');
$task = $this->taskFinder->getDetails($this->request->getIntegerParam('task_id')); $task = $this->taskFinder->getDetails($this->request->getIntegerParam('task_id'));
if (empty($task)) { if (empty($task)) {
$this->notfound(); $this->notfound();
} }
if ($project_id !== 0 && $project_id != $task['project_id']) {
$this->forbidden();
}
return $task; return $task;
} }