• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Fixed Missing verification of View Media permission on album create

thedude

Well-known member
#1
XFMG 1.03

Function: XenGallery_ControllerPublic_Album actionCreate

Line 995

In addition to checking $canChangeAddPermission, there should be

Code:
if (!$canChangeViewPermission && ($viewMedia != $options->xengalleryAlbumViewPerm))
{
      $viewMedia = $options->xengalleryAlbumViewPerm;
}