Check user permission for the mediafinder formwidget.

Fixes #4216. Replaces #4669. Credit to @gergo85.
This commit is contained in:
Luke Towers 2019-11-12 12:32:17 -06:00
parent 8fb9c59ee1
commit 85fadbfef3
1 changed files with 5 additions and 2 deletions

View File

@ -1,7 +1,8 @@
<?php namespace Backend\FormWidgets;
use System\Classes\MediaLibrary;
use BackendAuth;
use Backend\Classes\FormField;
use System\Classes\MediaLibrary;
use Backend\Classes\FormWidgetBase;
/**
@ -63,7 +64,9 @@ class MediaFinder extends FormWidgetBase
'imageHeight'
]);
if ($this->formField->disabled) {
$user = BackendAuth::getUser();
if ($this->formField->disabled || !$user || !$user->hasAccess('media.manage_media')) {
$this->previewMode = true;
}
}