From: Jan Schneider <jan@horde.org>
Date: Mon, 16 Nov 2009 18:08:51 +0000 (+0100)
Subject: Permission checking.
X-Git-Url: https://git.internetallee.de/?a=commitdiff_plain;h=b5cad97f7502e2b729283324fb7d0137a13f5c4a;p=horde.git

Permission checking.
---

diff --git a/nag/lib/Api.php b/nag/lib/Api.php
index 176fcc401..8db58c614 100644
--- a/nag/lib/Api.php
+++ b/nag/lib/Api.php
@@ -906,7 +906,8 @@ class Nag_Api extends Horde_Registry_Api
             return $task;
         }
 
-        if (!array_key_exists($task->tasklist, Nag::listTasklists(false, PERMS_READ))) {
+        if (!array_key_exists($task->tasklist,
+                              Nag::listTasklists(false, PERMS_READ))) {
             return PEAR::raiseError(_("Permission Denied"));
         }
 
@@ -944,6 +945,12 @@ class Nag_Api extends Horde_Registry_Api
     public function getTask($tasklist, $id)
     {
         require_once dirname(__FILE__) . '/base.php';
+
+        if (!array_key_exists($tasklist,
+                              Nag::listTasklists(false, PERMS_READ))) {
+            return PEAR::raiseError(_("Permission Denied"));
+        }
+
         $storage = Nag_Driver::singleton($tasklist);
         return $storage->get($id);
     }