CC-4095: Media Library -> Playlist: dj user can delete the playlist owned by

others on some situation.

- fixed
This commit is contained in:
James 2012-07-10 17:09:21 -04:00
parent d90d83200e
commit 39506740eb
3 changed files with 37 additions and 22 deletions

View file

@ -129,27 +129,11 @@ class LibraryController extends Zend_Controller_Action
}
}
$hasPermission = true;
if (count($playlists)) {
// make sure use has permission to delete all playslists in the list
if(!$isAdminOrPM){
foreach($playlists as $pid){
$pl = new Application_Model_Playlist($pid);
if($pl->getCreatorId() != $user->getId()){
$hasPermission = false;
}
}
}
}
if (!$isAdminOrPM && count($files)) {
$hasPermission = false;
}
if(!$hasPermission){
try{
Application_Model_Playlist::DeletePlaylists($playlists, $user->getId());
}catch (PlaylistNoPermissionException $e){
$this->view->message = "You don't have a permission to delete all playlists/files that are selected.";
return;
}else{
Application_Model_Playlist::DeletePlaylists($playlists);
}
foreach ($files as $id) {