From efcbfa172d76316d2e6ee63b5577e3ce06a16436 Mon Sep 17 00:00:00 2001
From: Marcel Werk <burntime@woltlab.com>
Date: Tue, 17 Dec 2024 14:32:03 +0100
Subject: [PATCH] Add additional check whether the grid view is accessible

---
 .../install/files/lib/page/AbstractGridViewPage.class.php     | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php b/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php
index b3dd37746d..3d89a003d7 100644
--- a/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php
+++ b/wcfsetup/install/files/lib/page/AbstractGridViewPage.class.php
@@ -2,6 +2,7 @@
 
 namespace wcf\page;
 
+use wcf\system\exception\PermissionDeniedException;
 use wcf\system\request\LinkHandler;
 use wcf\system\gridView\AbstractGridView;
 use wcf\system\WCF;
@@ -62,6 +63,9 @@ abstract class AbstractGridViewPage extends AbstractPage
     protected function initGridView(): void
     {
         $this->gridView = $this->createGridViewController();
+        if (!$this->gridView->isAccessible()) {
+            throw new PermissionDeniedException();
+        }
 
         if ($this->sortField) {
             $this->gridView->setSortField($this->sortField);
-- 
2.20.1