oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

setParent shouldn't check user permissions, only www_ methods should

Browse source
This commit is contained in:
Graham Knop 2009-04-03 19:26:13 +00:00
parent ff9d14b17c
commit 269227aa07
1 changed files with 0 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
lib/WebGUI/AssetLineage.pm
View file

@ -829,7 +829,6 @@ sub setParent {
return 0 if ($newParent->getId eq $self->get("parentId")); # don't move it to where it already is
return 0 if ($newParent->getId eq $self->getId); # don't move it to itself
my $oldLineage = $self->get("lineage");
return 0 unless $newParent->canEdit;
my $lineage = $newParent->get("lineage").$newParent->getNextChildRank;
return 0 if ($lineage =~ m/^$oldLineage/); # can't move it to its own child
$self->session->db->beginTransaction;