Commit 042dccdc authored by Henning Leutz's avatar Henning Leutz 🥋

fix: upload permissions integrated

parent a8b8f4a0
......@@ -578,8 +578,6 @@ class Manager
/**
* @param null $User
* @throws QUI\Permissions\Exception
*
* @todo add permission -> permission.xml
*/
protected function checkUserPermissions($User = null)
{
......@@ -589,6 +587,10 @@ class Manager
return;
}
if (QUI::getUsers()->isSystemUser($User)) {
return;
}
if (!$User) {
$User = QUI::getUserBySession();
}
......
......@@ -12,6 +12,8 @@ $dir = \str_replace('quiqqer/quiqqer/lib/QUI/Upload/bin', '', \dirname(__FILE__)
require_once $dir.'header.php';
try {
QUI\Permissions\Permission::checkPermission('quiqqer.frontend.upload');
$QUM = new QUI\Upload\Manager();
QUI::getAjax();
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment