Bug: 14568 Fix regression in honoring SHOW vs READ perms.

horde · Feb 1, 2017 · a32314a · a32314a
1 parent 0541418
commit a32314a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/kronolith/lib/Event.php b/kronolith/lib/Event.php
@@ -2633,7 +2633,8 @@ public function isPrivate($user = null)
 
         // Never private if private is not true or if the current user is the
         // event creator.
-        if (!$this->private || $this->creator == $user) {
+        if ((!$this->private || $this->creator == $user) &&
+            $this->hasPermission(Horde_Perms::READ, $user)) {
             return false;
         }