From 7b796ed76ea58f91926d9064a74d30f807ff01f6 Mon Sep 17 00:00:00 2001
From: Paul Driver <frodwith@gmail.com>
Date: Wed, 25 May 2011 15:44:46 -0500
Subject: [PATCH] Check permissions in account plugin

---
 lib/WebGUI/Account.pm | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/WebGUI/Account.pm b/lib/WebGUI/Account.pm
index 5727469bd..622283d37 100644
--- a/lib/WebGUI/Account.pm
+++ b/lib/WebGUI/Account.pm
@@ -172,6 +172,12 @@ sub callMethod {
         );
         return undef;
     }
+
+    unless ($self->canView) {
+        my $session = $self->session;
+        $session->output->print($session->privilege->insufficient);
+        return undef;
+    }
    
     #Try to call the method
     my $output = eval { $self->$method(@{$args}) };