From c88b541447b5f726dfa59fc3e2540ea81e079ea2 Mon Sep 17 00:00:00 2001
From: Marcel Werk <burntime@woltlab.com>
Date: Tue, 24 May 2016 11:05:22 +0200
Subject: [PATCH] Fixed missing permission check

---
 com.woltlab.wcf/templates/userInformationHeadline.tpl | 2 +-
 com.woltlab.wcf/templates/userProfilePreview.tpl      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/com.woltlab.wcf/templates/userInformationHeadline.tpl b/com.woltlab.wcf/templates/userInformationHeadline.tpl
index 9e116b1796..39ea0e24a9 100644
--- a/com.woltlab.wcf/templates/userInformationHeadline.tpl
+++ b/com.woltlab.wcf/templates/userInformationHeadline.tpl
@@ -11,7 +11,7 @@
 	</h3>
 </div>	
 <ul class="inlineList commaSeparated">
-	{if $user->isAccessible('canViewProfile')}
+	{if $__wcf->getSession()->getPermission('user.profile.canViewUserProfile') && $user->isAccessible('canViewProfile')}
 		{if $user->isVisibleOption('gender') && $user->gender}<li>{lang}wcf.user.gender.{if $user->gender == 1}male{else}female{/if}{/lang}</li>{/if}
 		{if $user->isVisibleOption('birthday') && $user->getAge()}<li>{@$user->getAge()}</li>{/if}
 		{if $user->isVisibleOption('location') && $user->location}<li>{lang}wcf.user.membersList.location{/lang}</li>{/if}
diff --git a/com.woltlab.wcf/templates/userProfilePreview.tpl b/com.woltlab.wcf/templates/userProfilePreview.tpl
index b6467425e4..c4a4526fb0 100644
--- a/com.woltlab.wcf/templates/userProfilePreview.tpl
+++ b/com.woltlab.wcf/templates/userProfilePreview.tpl
@@ -17,7 +17,7 @@
 			{hascontent}
 				<dl class="plain inlineDataList userFields">
 					{content}
-						{if $user->isAccessible('canViewProfile')}
+						{if $__wcf->getSession()->getPermission('user.profile.canViewUserProfile') && $user->isAccessible('canViewProfile')}
 							{if $user->occupation}
 								<dt>{lang}wcf.user.option.occupation{/lang}</dt>
 								<dd>{$user->occupation}</dd>
-- 
2.20.1