From 26d9066588ee774a0763900a1611408cc67b8301 Mon Sep 17 00:00:00 2001 From: yomguy Date: Fri, 10 Jun 2011 18:35:37 +0200 Subject: [PATCH] avoid item access when item.collection.public_acccess is none --- telemeta/web/base.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telemeta/web/base.py b/telemeta/web/base.py index 2c4219a3..0452d24b 100644 --- a/telemeta/web/base.py +++ b/telemeta/web/base.py @@ -256,7 +256,7 @@ class WebView(object): else: item = MediaItem.objects.get(public_id=public_id) - if item.public_access == 'none' and not request.user.is_staff: + if (item.public_access == 'none' or item.collection.public_access == 'none') and not request.user.is_staff: return HttpResponseRedirect('not_allowed/') # Get TimeSide processors -- 2.39.5