fix(photo upload): fix own page upload error (#1336)

This commit is contained in:
mr❤️🤢 2025-06-01 18:02:00 +03:00 committed by GitHub
parent dd19163e27
commit b90a0fa013
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 2 deletions

View file

@ -60,6 +60,11 @@ abstract class MediaCollection extends RowModel
} }
} }
public function getOwnerId(): int
{
return (int) $this->getRecord()->owner;
}
public function getPrettyId(): string public function getPrettyId(): string
{ {
return $this->getRecord()->owner . "_" . $this->getRecord()->id; return $this->getRecord()->owner . "_" . $this->getRecord()->id;

View file

@ -284,13 +284,15 @@ final class PhotosPresenter extends OpenVKPresenter
} }
if ($_SERVER["REQUEST_METHOD"] == "GET" || $this->queryParam("act") == "finish") { if ($_SERVER["REQUEST_METHOD"] == "GET" || $this->queryParam("act") == "finish") {
if (!$album) { if (!$album || $album->isCreatedBySystem()) {
$this->flashFail("err", tr("error"), tr("error_adding_to_deleted")); $this->flashFail("err", tr("error"), tr("error_adding_to_deleted"));
} }
} }
if ($album && !$album->canBeModifiedBy($this->user->identity)) { if ($album && !$album->canBeModifiedBy($this->user->identity)) {
$this->flashFail("err", tr("error_access_denied_short"), tr("error_access_denied")); if ($album->getOwnerId() != $this->user->id) {
$this->flashFail("err", tr("error_access_denied_short"), tr("error_access_denied"));
}
} }
if ($_SERVER["REQUEST_METHOD"] === "POST") { if ($_SERVER["REQUEST_METHOD"] === "POST") {