From 3b379355bf8dfec739fc7242a1ee963581a77d5f Mon Sep 17 00:00:00 2001 From: Karsten Heiken Date: Wed, 28 Sep 2011 20:23:31 +0200 Subject: [PATCH] Fix _checkAccess so the owner of a project can see it --- application/controllers/projects.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/application/controllers/projects.php b/application/controllers/projects.php index 8dd3bd3..4447cbf 100644 --- a/application/controllers/projects.php +++ b/application/controllers/projects.php @@ -219,7 +219,7 @@ class Projects extends MY_Controller { private function _checkAccess($projectId) { $project = $this->project->getById($projectId); $share = $this->share->get($projectId, $this->session->userdata('user_id')); - return $this->access->isAdmin() || $project['public'] == 1 || isset($share['project_id']); + return $this->access->isAdmin() || $project['public'] == 1 || isset($share['project_id']) || $project['owner'] === $this->session->userdata('user_id'); } }