From fc8e24c00932145e4d169cb6f52bfe56d3e55308 Mon Sep 17 00:00:00 2001 From: Marcel Werk Date: Wed, 6 May 2020 20:26:20 +0200 Subject: [PATCH] When searching conversations the permission was not checked --- files/lib/system/search/ConversationMessageSearch.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/files/lib/system/search/ConversationMessageSearch.class.php b/files/lib/system/search/ConversationMessageSearch.class.php index 3e0cd04..9b50aa5 100644 --- a/files/lib/system/search/ConversationMessageSearch.class.php +++ b/files/lib/system/search/ConversationMessageSearch.class.php @@ -118,7 +118,7 @@ class ConversationMessageSearch extends AbstractSearchableObjectType { * @inheritDoc */ public function isAccessible() { - return (WCF::getUser()->userID ? true : false) && MODULE_CONVERSATION; + return (WCF::getUser()->userID ? true : false) && MODULE_CONVERSATION && WCF::getSession()->getPermission('user.conversation.canUseConversation'); } /** @noinspection PhpMissingParentCallCommonInspection */ -- 2.20.1