Revert "Fixes #16572: mc_user_pref_get_pref() requires read/write api…

… access where it shouldn't." This reverts commit 733b77a.
mantisbt · Nov 3, 2013 · d3200ab · d3200ab
1 parent 7220cd7
commit d3200ab
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/api/soap/mc_user_pref_api.php b/api/soap/mc_user_pref_api.php
@@ -29,5 +29,9 @@ function mc_user_pref_get_pref( $p_username, $p_password, $p_project_id, $p_pref
 		return mci_soap_fault_login_failed();
 	}
 
+	if ( !mci_has_readonly_access( $t_user_id ) ) {
+		return mci_soap_fault_access_denied( $t_user_id );
+	}
+
 	return user_pref_get_pref( $t_user_id, $p_pref_name, $p_project_id );
 }