From 0e1a9950dd56cf604ddb5f59b95f826cb11be698 Mon Sep 17 00:00:00 2001
From: Alexander Ebert <ebert@woltlab.com>
Date: Wed, 25 Jan 2017 14:29:36 +0100
Subject: [PATCH] Disable access to media when editing signatures

---
 com.woltlab.wcf/templates/signatureEdit.tpl      |  5 ++++-
 com.woltlab.wcf/templates/wysiwyg.tpl            | 12 +++++++++++-
 wcfsetup/install/files/acp/templates/wysiwyg.tpl | 12 +++++++++++-
 3 files changed, 26 insertions(+), 3 deletions(-)

diff --git a/com.woltlab.wcf/templates/signatureEdit.tpl b/com.woltlab.wcf/templates/signatureEdit.tpl
index 55f6531915..142565769f 100644
--- a/com.woltlab.wcf/templates/signatureEdit.tpl
+++ b/com.woltlab.wcf/templates/signatureEdit.tpl
@@ -28,7 +28,10 @@
 			<dl class="wide{if $errorField == 'text'} formError{/if}">
 				<dt><label for="text">{lang}wcf.user.signature{/lang}</label></dt>
 				<dd>
-					<textarea id="text" class="wysiwygTextarea" name="text" rows="20" cols="40" data-disable-attachments="true">{$text}</textarea>
+					<textarea id="text" class="wysiwygTextarea" name="text" rows="20" cols="40"
+					          data-disable-attachments="true"
+					          data-disable-media="true"
+					>{$text}</textarea>
 					{if $errorField == 'text'}
 						<small class="innerError">
 							{if $errorType == 'empty'}
diff --git a/com.woltlab.wcf/templates/wysiwyg.tpl b/com.woltlab.wcf/templates/wysiwyg.tpl
index 34786632c3..f77d6b7a6c 100644
--- a/com.woltlab.wcf/templates/wysiwyg.tpl
+++ b/com.woltlab.wcf/templates/wysiwyg.tpl
@@ -121,6 +121,8 @@
 				element.value = autosave.getInitialValue();
 			}
 			
+			var disableMedia = elDataBool(element, 'disable-media');
+			
 			var config = {
 				buttons: buttons,
 				clipboardImageUpload: {if $__wcf->getBBCodeHandler()->isAvailableBBCode('img')}true{else}false{/if},
@@ -237,7 +239,15 @@
 			
 			// media
 			{if $__wcf->session->getPermission('admin.content.cms.canUseMedia')}
-				config.plugins.push('WoltLabMedia');
+				if (disableMedia) {
+					var index = config.buttons.indexOf('woltlabMedia');
+					if (index !== -1) {
+						config.buttons.splice(index, 1);
+					}
+				}
+				else {
+					config.plugins.push('WoltLabMedia');
+				}
 			{/if}
 			
 			{if $__redactorConfig|isset}{@$__redactorConfig}{/if}
diff --git a/wcfsetup/install/files/acp/templates/wysiwyg.tpl b/wcfsetup/install/files/acp/templates/wysiwyg.tpl
index 34786632c3..f77d6b7a6c 100644
--- a/wcfsetup/install/files/acp/templates/wysiwyg.tpl
+++ b/wcfsetup/install/files/acp/templates/wysiwyg.tpl
@@ -121,6 +121,8 @@
 				element.value = autosave.getInitialValue();
 			}
 			
+			var disableMedia = elDataBool(element, 'disable-media');
+			
 			var config = {
 				buttons: buttons,
 				clipboardImageUpload: {if $__wcf->getBBCodeHandler()->isAvailableBBCode('img')}true{else}false{/if},
@@ -237,7 +239,15 @@
 			
 			// media
 			{if $__wcf->session->getPermission('admin.content.cms.canUseMedia')}
-				config.plugins.push('WoltLabMedia');
+				if (disableMedia) {
+					var index = config.buttons.indexOf('woltlabMedia');
+					if (index !== -1) {
+						config.buttons.splice(index, 1);
+					}
+				}
+				else {
+					config.plugins.push('WoltLabMedia');
+				}
 			{/if}
 			
 			{if $__redactorConfig|isset}{@$__redactorConfig}{/if}
-- 
2.20.1