Ensure that non-admins are able to download their own admins-only files.

See #3334.
openlab-at-city-tech · Jun 13, 2024 · 2e0abd9 · 2e0abd9
1 parent e739af1
commit 2e0abd9
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/wp-content/mu-plugins/openlab-group-document-privacy.php b/wp-content/mu-plugins/openlab-group-document-privacy.php
@@ -60,10 +60,12 @@ function cac_catch_group_doc_request() {
 
 		$user_can_download = true;
 
+		$user_is_creator = (int) $document->user_id === (int) bp_loggedin_user_id();
+
 		if ( 'admins' === $doc_privacy ) {
-			$user_can_download = groups_is_user_admin( bp_loggedin_user_id(), $group_id );
+			$user_can_download = groups_is_user_admin( bp_loggedin_user_id(), $group_id ) || $user_is_creator;
 		} elseif ( 'members' === $doc_privacy ) {
-			$user_can_download = groups_is_user_member( bp_loggedin_user_id(), $group_id );
+			$user_can_download = groups_is_user_member( bp_loggedin_user_id(), $group_id ) || $user_is_creator;
 		} elseif ( 'public' !== $group->status ) {
 			// If the group is not public, then the user must be logged in and
 			// a member of the group to download the document