Fix access check for projects

application/controllers/projects.php

@@ -183,7 +183,8 @@ class Projects extends CI_Controller {
 	 */
 	private function _checkAccess($projectId) {
 		$project = $this->project->getById($projectId);
-		return $this->access->isAdmin() || $project['public'] == 1;
+		$share = $this->share->get($projectId, $this->session->userdata('user_id'));
+		return $this->access->isAdmin() || $project['public'] == 1 || isset($share['project_id']);
 	}
 }
 

application/models/share.php

@@ -35,6 +35,17 @@ class Share extends CI_Model {
 		parent::__construct();
 	}
 
+	/**
+	 * Gets a share by its primary key.
+	 *
+	 * @param string $projectId
+	 * @param string $userId
+	 * @return array
+	 */
+	public function get($projectId, $userId) {
+		return $this->db->get_where('shares', array('project_id' => $projectId, 'user_id' => $userId))->row_array();
+	}
+
 	/**
 	 * Gets all share for a specific project.
 	 *
@@ -48,6 +59,19 @@ class Share extends CI_Model {
 		return $this->db->get_where('shares', array('project_id' => $projectId))->result_array();
 	}
 
+	/**
+	 * Gets all share for a specific user.
+	 *
+	 * @param string $userId
+	 * @return array
+	 */
+	public function getByUserId($userId) {
+		$this->db->select('shares.*, projects.name');
+		$this->db->join('projects', 'projects.id = shares.project_id', 'left');
+
+		return $this->db->get_where('shares', array('user_id' => $userId))->result_array();
+	}
+
 	/**
 	 * Creates a share.
 	 *