xpressengine /
xe-core
| @@ 375-403 (lines=29) @@ | ||
| 372 | if($value) $downloadGrantCount++; |
|
| 373 | } |
|
| 374 | ||
| 375 | if(is_array($file_module_config->download_grant) && $downloadGrantCount>0) |
|
| 376 | { |
|
| 377 | if(!Context::get('is_logged')) return $this->stop('msg_not_permitted_download'); |
|
| 378 | $logged_info = Context::get('logged_info'); |
|
| 379 | if($logged_info->is_admin != 'Y') |
|
| 380 | { |
|
| 381 | $oModuleModel =& getModel('module'); |
|
| 382 | $columnList = array('module_srl', 'site_srl'); |
|
| 383 | $module_info = $oModuleModel->getModuleInfoByModuleSrl($this->module_srl, $columnList); |
|
| 384 | ||
| 385 | if(!$oModuleModel->isSiteAdmin($logged_info, $module_info->site_srl)) |
|
| 386 | { |
|
| 387 | $oMemberModel =& getModel('member'); |
|
| 388 | $member_groups = $oMemberModel->getMemberGroups($logged_info->member_srl, $module_info->site_srl); |
|
| 389 | ||
| 390 | $is_permitted = false; |
|
| 391 | for($i=0;$i<count($file_module_config->download_grant);$i++) |
|
| 392 | { |
|
| 393 | $group_srl = $file_module_config->download_grant[$i]; |
|
| 394 | if($member_groups[$group_srl]) |
|
| 395 | { |
|
| 396 | $is_permitted = true; |
|
| 397 | break; |
|
| 398 | } |
|
| 399 | } |
|
| 400 | if(!$is_permitted) return $this->stop('msg_not_permitted_download'); |
|
| 401 | } |
|
| 402 | } |
|
| 403 | } |
|
| 404 | ||
| 405 | $oDocumentModel = getModel('document'); |
|
| 406 | $document_srl = Context::get('document_srl'); |
|
| @@ 248-276 (lines=29) @@ | ||
| 245 | if($value) $downloadGrantCount++; |
|
| 246 | } |
|
| 247 | ||
| 248 | if(is_array($file_module_config->download_grant) && $downloadGrantCount>0) |
|
| 249 | { |
|
| 250 | if(!Context::get('is_logged')) return $this->stop('msg_not_permitted_download'); |
|
| 251 | $logged_info = Context::get('logged_info'); |
|
| 252 | if($logged_info->is_admin != 'Y') |
|
| 253 | { |
|
| 254 | $oModuleModel =& getModel('module'); |
|
| 255 | $columnList = array('module_srl', 'site_srl'); |
|
| 256 | $module_info = $oModuleModel->getModuleInfoByModuleSrl($file_obj->module_srl, $columnList); |
|
| 257 | ||
| 258 | if(!$oModuleModel->isSiteAdmin($logged_info, $module_info->site_srl)) |
|
| 259 | { |
|
| 260 | $oMemberModel =& getModel('member'); |
|
| 261 | $member_groups = $oMemberModel->getMemberGroups($logged_info->member_srl, $module_info->site_srl); |
|
| 262 | ||
| 263 | $is_permitted = false; |
|
| 264 | for($i=0;$i<count($file_module_config->download_grant);$i++) |
|
| 265 | { |
|
| 266 | $group_srl = $file_module_config->download_grant[$i]; |
|
| 267 | if($member_groups[$group_srl]) |
|
| 268 | { |
|
| 269 | $is_permitted = true; |
|
| 270 | break; |
|
| 271 | } |
|
| 272 | } |
|
| 273 | if(!$is_permitted) return $this->stop('msg_not_permitted_download'); |
|
| 274 | } |
|
| 275 | } |
|
| 276 | } |
|
| 277 | // Call a trigger (before) |
|
| 278 | $output = ModuleHandler::triggerCall('file.downloadFile', 'before', $file_obj); |
|
| 279 | if(!$output->toBool()) return $this->stop(($output->message)?$output->message:'msg_not_permitted_download'); |
|
