From: Marcel Werk <burntime@woltlab.com>
Date: Fri, 27 Sep 2013 17:32:07 +0000 (+0200)
Subject: Added missing permission check
X-Git-Tag: 2.0.0_Beta_10~16
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=6107f9c3f2990badad9ac9ec0c78be4fa6f857f5;p=GitHub%2FWoltLab%2FWCF.git

Added missing permission check
---

diff --git a/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php b/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php
index 2196aa2fa1..21ff9309e1 100644
--- a/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php
+++ b/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php
@@ -1,6 +1,7 @@
 <?php
 namespace wcf\acp\page;
 use wcf\data\object\type\ObjectTypeCache;
+use wcf\page\AbstractPage;
 use wcf\system\exception\PermissionDeniedException;
 
 /**
@@ -14,10 +15,17 @@ use wcf\system\exception\PermissionDeniedException;
  * @category	Community Framework
  */
 class AttachmentPage extends \wcf\page\AttachmentPage {
+	/**
+	 * @see	wcf\page\AbstractPage::$neededPermissions
+	 */
+	public $neededPermissions = array('admin.attachment.canManageAttachment');
+	
 	/**
 	 * @see	wcf\page\IPage::checkPermissions()
 	 */
 	public function checkPermissions() {
+		AbstractPage::checkPermissions();
+		
 		if ($this->attachment->tmpHash) {
 			throw new PermissionDeniedException();
 		}