MDL-34585 fix broken blog file access control

2012-08-02 10:00:04 +02:00
parent 8f7756b0e2
commit 2d2cce8bd2
1 changed files with 3 additions and 3 deletions
@@ -101,15 +101,15 @@ if ($component === 'blog') {
        }
    }

-    if ('publishstate' === 'public') {
+    if ($entry->publishstate === 'public') {
        if ($CFG->forcelogin) {
            require_login();
        }

-    } else if ('publishstate' === 'site') {
+    } else if ($entry->publishstate === 'site') {
        require_login();
        //ok
-    } else if ('publishstate' === 'draft') {
+    } else if ($entry->publishstate === 'draft') {
        require_login();
        if ($USER->id != $entry->userid) {
            send_file_not_found();