Merge pull request #3318 from nextcloud/backport/3316/stable1.4

[stable1.4] Additional check for stacks
This commit is contained in:
Julius Härtl
2021-09-14 21:08:34 +02:00
committed by GitHub

View File

@@ -48,7 +48,6 @@ class StackService {
private $assignedUsersMapper; private $assignedUsersMapper;
private $attachmentService; private $attachmentService;
private $activityManager; private $activityManager;
private $symfonyAdapter;
private $changeHelper; private $changeHelper;
public function __construct( public function __construct(
@@ -110,6 +109,7 @@ class StackService {
throw new BadRequestException('stack id must be a number'); throw new BadRequestException('stack id must be a number');
} }
$this->permissionService->checkPermission($this->stackMapper, $stackId, Acl::PERMISSION_READ);
$stack = $this->stackMapper->find($stackId); $stack = $this->stackMapper->find($stackId);
$cards = $this->cardMapper->findAll($stackId); $cards = $this->cardMapper->findAll($stackId);
foreach ($cards as $cardIndex => $card) { foreach ($cards as $cardIndex => $card) {