Changeset 13577 for trunk/xmlrpc

Timestamp:

01/17/10 19:32:34 (2 years ago)

Author:

Alexander Trofimov

Message:

Ticket #1705

Location:

trunk/xmlrpc

Files:

• BxDolXMLRPCImages.php (modified) (1 diff)
• BxDolXMLRPCMedia.php (modified) (2 diffs)

trunk/xmlrpc/BxDolXMLRPCImages.php

@@ -45 +45 @@
             return new xmlrpcresp(new xmlrpcval(array('error' => new xmlrpcval(1,"int")), "struct"));
 
+        if (!$this->_isMembershipEnabledFor($iIdProfileViewer, 'BX_PHOTOS_ADD'))
+            return new xmlrpcval ("fail access");
+
         // write tmp file
 

trunk/xmlrpc/BxDolXMLRPCMedia.php

@@ -56 +56 @@
                 $sModuleName = 'photos';
                 $sType = 'bx_photos';
+                $sMemAction = 'BX_PHOTOS_VIEW';
                 break;
             case 'video':
                 $sModuleName = 'videos';
                 $sType = 'bx_videos';
+                $sMemAction = 'BX_VIDEOS_VIEW';
                 break;
             case 'music':
                 $sModuleName = 'sounds';
                 $sType = 'bx_sounds';
+                $sMemAction = 'BX_SOUNDS_VIEW';
                 break;          
             default:
                 return array();
         }
+
+        if (!$this->_isMembershipEnabledFor($iIdProfileViewer, $sMemAction))
+            return array ();
+
         bx_import('BxDolAlbums');
         $o = new BxDolAlbums ($sType, (int)$iIdProfile);
@@ -148 +155 @@
         return new xmlrpcval ($aFiles, "array");
     }
+
+    function _isMembershipEnabledFor ($iProfileId, $sMembershipActionConstant) {
+        defineMembershipActions (array('photos add', 'photos view', 'sounds view', 'videos view'));
+        if (!defined($sMembershipActionConstant))
+            return false;
+        $aCheck = checkAction($iProfileId ? $iProfileId : $_COOKIE['memberID'], constant($sMembershipActionConstant));
+        return $aCheck[CHECK_ACTION_RESULT] == CHECK_ACTION_RESULT_ALLOWED;
+    }    
 }