DataObjects/Images.php
authorAlan Knowles <alan@akbkhome.com>
Thu, 23 Feb 2012 23:24:05 +0000 (07:24 +0800)
committerAlan Knowles <alan@akbkhome.com>
Thu, 23 Feb 2012 23:24:05 +0000 (07:24 +0800)
DataObjects/Images.php

index 3db7cd6..ccc2094 100644 (file)
@@ -438,6 +438,11 @@ class Pman_Core_DataObjects_Images extends DB_DataObject
             
         
         if (!empty($ar['_copy_from'])) {
+            
+            if (!$this->checkPerm( 'A' , $this->authUser))  {
+                $roo->jerr("IMAGE UPLOAD PERMISSION DENIED");
+            }
+            
             $copy = DB_DataObject::factory('Images');
             $copy->get($ar['_copy_from']);
             $this->setFrom($copy->toArray());