mirror of
https://github.com/OrchardCMS/Orchard.git
synced 2026-02-09 09:16:41 +08:00
#18411: Fixing publishing on restricted roles
Work Item: 18411 --HG-- branch : 1.x
This commit is contained in:
@@ -213,7 +213,11 @@ namespace Orchard.Core.Contents.Controllers {
|
|||||||
[HttpPost, ActionName("Create")]
|
[HttpPost, ActionName("Create")]
|
||||||
[FormValueRequired("submit.Publish")]
|
[FormValueRequired("submit.Publish")]
|
||||||
public ActionResult CreateAndPublishPOST(string id, string returnUrl) {
|
public ActionResult CreateAndPublishPOST(string id, string returnUrl) {
|
||||||
if (!Services.Authorizer.Authorize(Permissions.PublishContent, T("Couldn't create content")))
|
|
||||||
|
// pass a dummy content to the authorization check to check for "own" variations
|
||||||
|
var dummyContent = _contentManager.New(id);
|
||||||
|
|
||||||
|
if (!Services.Authorizer.Authorize(Permissions.PublishContent, dummyContent, T("Couldn't create content")))
|
||||||
return new HttpUnauthorizedResult();
|
return new HttpUnauthorizedResult();
|
||||||
|
|
||||||
return CreatePOST(id, returnUrl, contentItem => _contentManager.Publish(contentItem));
|
return CreatePOST(id, returnUrl, contentItem => _contentManager.Publish(contentItem));
|
||||||
|
|||||||
Reference in New Issue
Block a user