Restricts 'Approve' action to 'edit' perm...if you can't edit it, you…

… can't approve it...e.g., if you can only create/edit your own items, you must not be allowed to 'approve' other items, nor should we default to allowing you to approve your own items unless granted permission. [#1058]
exponentcms · Dec 26, 2013 · 1cf7a23 · 1cf7a23
1 parent 3cf2b25
commit 1cf7a23
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/framework/modules/text/views/text/showall.tpl b/framework/modules/text/views/text/showall.tpl
@@ -48,7 +48,7 @@
                     {if $permissions.delete || ($permissions.create && $text->poster == $user->id)}
                         {icon action=delete record=$text}
                     {/if}
-                    {if !$text->approved && $permissions.approve}
+                    {if !$text->approved && $permissions.approve && $permissions.edit}
                         {icon action=approve record=$text}
                     {/if}
                 </div>