Added Category permission check

vanilla · Mar 28, 2019 · ecd12d6 · ecd12d6
1 parent 2ca1b39
commit ecd12d6
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/plugins/Reporting/class.reporting.plugin.php b/plugins/Reporting/class.reporting.plugin.php
@@ -97,6 +97,12 @@ public function controller_Report($sender) {
       $reportElementModel = new $reportElementModelName();
       $reportElement = $reportElementModel->getID($elementID);
 
+      $hasPermission = CategoryModel::checkPermission($reportElement->CategoryID, 'Vanilla.Discussion.View');
+
+      if (!$hasPermission) {
+          throw permissionException("Vanilla.Discussion.View");
+      }
+
       $elementTitle = Gdn_Format::text(getValue('Name', $reportElement, NULL), FALSE);
       $elementExcerpt = Gdn_Format::text(getValue('Body', $reportElement, NULL), FALSE);
       if (!is_null($elementExcerpt)) {