From aeb396253f7116b69f54c363f65ffbf5c93901e9 Mon Sep 17 00:00:00 2001 From: Murtaza Sultani Date: Thu, 24 Jul 2025 17:14:57 +0200 Subject: Resolve "Wiki verwendet falsche Rechteabfragen in der JSON-API" Closes #5756 Merge request studip/studip!4390 --- lib/classes/JsonApi/Routes/Wiki/Authority.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/classes/JsonApi/Routes/Wiki/Authority.php b/lib/classes/JsonApi/Routes/Wiki/Authority.php index 090dc84..0a13a71 100644 --- a/lib/classes/JsonApi/Routes/Wiki/Authority.php +++ b/lib/classes/JsonApi/Routes/Wiki/Authority.php @@ -7,13 +7,13 @@ class Authority /** * @SuppressWarnings(PHPMD.Superglobals) */ - public static function canIndexWiki(\User $user, $range) + public static function canIndexWiki(\User $user, \Range $range) { if (!($range instanceof \Course || $range instanceof \Institute)) { return false; } - return $GLOBALS['perm']->have_studip_perm('user', $range->id, $user->id); + return $range->isAccessibleToUser($user->id); } /** -- cgit v1.0