diff --git a/main/document/create_document.php b/main/document/create_document.php index 3ade5e0664..d8b4fd564b 100755 --- a/main/document/create_document.php +++ b/main/document/create_document.php @@ -273,7 +273,7 @@ if (!$is_certificate_mode) { if (!$is_allowed_in_course) { api_not_allowed(true); } -if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'])) { +if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'] || is_my_shared_folder($_user['user_id'], Security::remove_XSS($_GET['dir']),api_get_session_id()))) { api_not_allowed(true); } diff --git a/main/document/create_drawing.php b/main/document/create_drawing.php index a4a20cff01..3ef4c641e2 100644 --- a/main/document/create_drawing.php +++ b/main/document/create_drawing.php @@ -86,9 +86,13 @@ if (isset ($_SESSION['_gid']) && $_SESSION['_gid'] != '') { if (!$is_allowed_in_course) { api_not_allowed(true); } -if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'])) { + + +if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'] || is_my_shared_folder($_user['user_id'], Security::remove_XSS($_GET['dir']),api_get_session_id()))) { api_not_allowed(true); } + + /* Header */ event_access_tool(TOOL_DOCUMENT); $display_dir = $dir; diff --git a/main/document/document.php b/main/document/document.php index 4b040f2f4f..2c78a0b303 100755 --- a/main/document/document.php +++ b/main/document/document.php @@ -815,7 +815,7 @@ if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_fold /* CREATE NEW DOCUMENT OR NEW DIRECTORY / GO TO UPLOAD / DOWNLOAD ZIPPED FOLDER */ // Create new document - if (!$is_certificate_mode && !is_my_shared_folder($_user['user_id'], $curdirpath, $current_session_id)) { + if (!$is_certificate_mode) { ?>   @@ -823,12 +823,10 @@ if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_fold } // Create new draw - if (!$is_certificate_mode && !is_my_shared_folder($_user['user_id'], $curdirpath, $current_session_id)) { ?>   - \ No newline at end of file