From 1e51113d90f002b3b68106e14f370d1c58340dd9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Julius=20H=C3=A4rtl?= <jus@bitgrid.net>
Date: Tue, 14 Sep 2021 09:21:18 +0200
Subject: [PATCH] Additional check for stacks
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Julius Härtl <jus@bitgrid.net>
---
 lib/Service/StackService.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/Service/StackService.php b/lib/Service/StackService.php
index 6bca4a4ce..57e442ff1 100644
--- a/lib/Service/StackService.php
+++ b/lib/Service/StackService.php
@@ -114,6 +114,7 @@ class StackService {
 			throw new BadRequestException('stack id must be a number');
 		}
 
+		$this->permissionService->checkPermission($this->stackMapper, $stackId, Acl::PERMISSION_READ);
 		$stack = $this->stackMapper->find($stackId);
 		$cards = $this->cardMapper->findAll($stackId);
 		foreach ($cards as $cardIndex => $card) {