From a32314ab7ee34c05d2915206ad8525efdd1e6032 Mon Sep 17 00:00:00 2001 From: Michael J Rubinsky Date: Fri, 27 Jan 2017 14:52:44 -0500 Subject: [PATCH] Bug: 14568 Fix regression in honoring SHOW vs READ perms. --- kronolith/lib/Event.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kronolith/lib/Event.php b/kronolith/lib/Event.php index 52eadf961f2..4f47d83f500 100644 --- a/kronolith/lib/Event.php +++ b/kronolith/lib/Event.php @@ -2633,7 +2633,8 @@ public function isPrivate($user = null) // Never private if private is not true or if the current user is the // event creator. - if (!$this->private || $this->creator == $user) { + if ((!$this->private || $this->creator == $user) && + $this->hasPermission(Horde_Perms::READ, $user)) { return false; }