Resolve #5008 "PHPLib - Öffentliche Belegungspläne gehen nicht"

Closes #5008

Merge request studip/studip!3799

1 files changed, 4 insertions, 2 deletions

diff --git a/app/controllers/resources/room_planning.php b/app/controllers/resources/room_planning.php
index 37e9193..6d6c922 100644
--- a/app/controllers/resources/room_planning.php
+++ b/app/controllers/resources/room_planning.php
@@ -22,11 +22,13 @@
  */
 class Resources_RoomPlanningController extends AuthenticatedController
 {
+    protected $allow_nobody = true;
+
     public function before_filter(&$action, &$args)
     {
         $anonymous_actions = ['booking_plan', 'anonymous_booking_plan_data'];
-        if (in_array($action, $anonymous_actions)) {
-            $this->allow_nobody = true;
+        if (!in_array($action, $anonymous_actions) && $GLOBALS['user']->id === 'nobody') {
+            throw new AccessDeniedException();
         }
         parent::before_filter($action, $args);
     }