]> BookStack Code Mirror - bookstack/commit
Fixed related permissions query not considering drafts
authorDan Brown <redacted>
Tue, 30 Nov 2021 00:06:17 +0000 (00:06 +0000)
committerDan Brown <redacted>
Tue, 30 Nov 2021 00:06:17 +0000 (00:06 +0000)
commitb4fa82e3298a15443ca40bff205b7a16a1031d92
treeeb280c8ff916f7e86bb27352dd8569e98ffcd157
parent42703dd859f6eb1917c2547da106f0de646674a6
Fixed related permissions query not considering drafts

Page-related items added on drafts could be visible in certain scenarios
since the applied permissions query filters would not consider
page draft visibility.
This commit alters queries on related items to apply such filtering.

Included test to cover API scenario.
Thanks to @haxatron for reporting.
app/Actions/ActivityService.php
app/Auth/Permissions/PermissionService.php
app/Exceptions/Handler.php
tests/Api/AttachmentsApiTest.php