diff --git a/main/calendar/agenda.php b/main/calendar/agenda.php index c70266b15e..05c67c2d9e 100755 --- a/main/calendar/agenda.php +++ b/main/calendar/agenda.php @@ -42,6 +42,20 @@ $group_id = api_get_group_id(); $groupInfo = GroupManager::get_group_properties($group_id); $eventId = isset($_REQUEST['id']) ? $_REQUEST['id'] : null; $type = $event_type = isset($_GET['type']) ? $_GET['type'] : null; +$messageId = (int) ($_GET['m'] ?? 0); +$messageInfo = []; + +$currentUserId = api_get_user_id(); + +if ($messageId) { + $event_type = 'personal'; + + $messageInfo = MessageManager::get_message_by_id($messageId); + + if (!in_array($currentUserId, [$messageInfo['user_receiver_id'], $messageInfo['user_sender_id']])) { + api_not_allowed(true); + } +} $htmlHeadXtra[] = "