@@ -256,7 +256,17 @@ class AddonController extends AddonsController { } public function Delete($AddonID = '') { - $this->Permission('Addons.Addon.Manage'); + $Session = Gdn::Session(); + if (!$Session->IsValid()) + $this->Form->AddError('You must be authenticated in order to use this form.'); + + $Addon = $this->AddonModel->GetID($AddonID); + if (!$Addon) + Redirect('garden/home/filenotfound'); + + if ($Session->UserID != $Addon->InsertUserID) + $this->Permission('Addons.Addon.Manage'); + $Session = Gdn::Session(); if (is_numeric($AddonID)) $this->AddonModel->Delete($AddonID); controllers/addon.php @@ -13,7 +13,7 @@ if ($this->DeliveryType() == DELIVERY_TYPE_ALL) <h2><?php echo Gdn::Translate('Upload a New Version'); ?></h2> <ul> <li> - <div class="Info"><?php echo Gdn::Translate('By uploading a file you certify that you have the right to distribute this picture and that it does not violate the Terms of Service.'); ?></div> + <div class="Info"><?php echo Gdn::Translate('By uploading a file you certify that you have the right to distribute this addon and that it does not violate the Terms of Service.'); ?></div> <?php echo $this->Form->Label('File to Upload (2mb max)', 'File'); ?> <?php echo $this->Form->Input('File', 'file', array('class' => 'File')); ?> </li> views/addon/newversion.php b1b92b88274f59acaff82b595d80651ae3e3073d mark mark@lussumo.com http://github.com/lussumo/VanillaAddons/commit/ad4c4f7b99f0f75368314b7da2b873e46608400b ad4c4f7b99f0f75368314b7da2b873e46608400b 2009-10-08T07:25:52-07:00 2009-10-08T07:25:52-07:00 Allowing users to delete their own addons. Fixed language typo. 6afd4729a23d84ac108fb39f3c233bbaacaab716 mark mark@lussumo.com