From: Marcel Werk <burntime@woltlab.com>
Date: Tue, 17 Dec 2024 13:32:03 +0000 (+0100)
Subject: Add additional check whether the grid view is accessible
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=efcbfa172d76316d2e6ee63b5577e3ce06a16436;p=GitHub%2FWoltLab%2FWCF.git

Add additional check whether the grid view is accessible
---

diff --git a/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php b/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php
index b3dd37746d..3d89a003d7 100644
--- a/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php
+++ b/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php
@@ -2,6 +2,7 @@
 
 namespace wcf\page;
 
+use wcf\system\exception\PermissionDeniedException;
 use wcf\system\request\LinkHandler;
 use wcf\system\gridView\AbstractGridView;
 use wcf\system\WCF;
@@ -62,6 +63,9 @@ abstract class AbstractGridViewPage extends AbstractPage
     protected function initGridView(): void
     {
         $this->gridView = $this->createGridViewController();
+        if (!$this->gridView->isAccessible()) {
+            throw new PermissionDeniedException();
+        }
 
         if ($this->sortField) {
             $this->gridView->setSortField($this->sortField);