[categories] - respect user access level

joomla · Nov 17, 2016 · 08fc542 · 08fc542
1 parent 3d9d2ce
commit 08fc542
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/administrator/components/com_content/models/featured.php b/administrator/components/com_content/models/featured.php
@@ -74,6 +74,7 @@ protected function getListQuery()
 		// Create a new query object.
 		$db = $this->getDbo();
 		$query = $db->getQuery(true);
+		$user = JFactory::getUser();
 
 		// Select the required fields from the table.
 		$query->select(
@@ -123,6 +124,13 @@ protected function getListQuery()
 			$query->where('a.access = ' . (int) $access);
 		}
 
+		// Filter by access level on categories.
+		if (!$user->authorise('core.admin'))
+		{
+			$groups = implode(',', $user->getAuthorisedViewLevels());
+			$query->where('c.access IN (' . $groups . ')');
+		}
+
 		// Filter by published state
 		$published = $this->getState('filter.published');