From: Marcel Werk <burntime@woltlab.com>
Date: Tue, 24 May 2016 09:05:22 +0000 (+0200)
Subject: Fixed missing permission check
X-Git-Tag: 3.0.0_Beta_1~1647
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=c88b541447b5f726dfa59fc3e2540ea81e079ea2;p=GitHub%2FWoltLab%2FWCF.git

Fixed missing permission check
---

diff --git a/com.woltlab.wcf/templates/userInformationHeadline.tpl b/com.woltlab.wcf/templates/userInformationHeadline.tpl
index 9e116b1796..39ea0e24a9 100644
--- a/com.woltlab.wcf/templates/userInformationHeadline.tpl
+++ b/com.woltlab.wcf/templates/userInformationHeadline.tpl
@@ -11,7 +11,7 @@
 	</h3>
 </div>	
 <ul class="inlineList commaSeparated">
-	{if $user->isAccessible('canViewProfile')}
+	{if $__wcf->getSession()->getPermission('user.profile.canViewUserProfile') && $user->isAccessible('canViewProfile')}
 		{if $user->isVisibleOption('gender') && $user->gender}<li>{lang}wcf.user.gender.{if $user->gender == 1}male{else}female{/if}{/lang}</li>{/if}
 		{if $user->isVisibleOption('birthday') && $user->getAge()}<li>{@$user->getAge()}</li>{/if}
 		{if $user->isVisibleOption('location') && $user->location}<li>{lang}wcf.user.membersList.location{/lang}</li>{/if}
diff --git a/com.woltlab.wcf/templates/userProfilePreview.tpl b/com.woltlab.wcf/templates/userProfilePreview.tpl
index b6467425e4..c4a4526fb0 100644
--- a/com.woltlab.wcf/templates/userProfilePreview.tpl
+++ b/com.woltlab.wcf/templates/userProfilePreview.tpl
@@ -17,7 +17,7 @@
 			{hascontent}
 				<dl class="plain inlineDataList userFields">
 					{content}
-						{if $user->isAccessible('canViewProfile')}
+						{if $__wcf->getSession()->getPermission('user.profile.canViewUserProfile') && $user->isAccessible('canViewProfile')}
 							{if $user->occupation}
 								<dt>{lang}wcf.user.option.occupation{/lang}</dt>
 								<dd>{$user->occupation}</dd>