diff --git a/main/document/create_document.php b/main/document/create_document.php
index 3ade5e0664..d8b4fd564b 100755
--- a/main/document/create_document.php
+++ b/main/document/create_document.php
@@ -273,7 +273,7 @@ if (!$is_certificate_mode) {
if (!$is_allowed_in_course) {
api_not_allowed(true);
}
-if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'])) {
+if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'] || is_my_shared_folder($_user['user_id'], Security::remove_XSS($_GET['dir']),api_get_session_id()))) {
api_not_allowed(true);
}
diff --git a/main/document/create_drawing.php b/main/document/create_drawing.php
index a4a20cff01..3ef4c641e2 100644
--- a/main/document/create_drawing.php
+++ b/main/document/create_drawing.php
@@ -86,9 +86,13 @@ if (isset ($_SESSION['_gid']) && $_SESSION['_gid'] != '') {
if (!$is_allowed_in_course) {
api_not_allowed(true);
}
-if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'])) {
+
+
+if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'] || is_my_shared_folder($_user['user_id'], Security::remove_XSS($_GET['dir']),api_get_session_id()))) {
api_not_allowed(true);
}
+
+
/* Header */
event_access_tool(TOOL_DOCUMENT);
$display_dir = $dir;
diff --git a/main/document/document.php b/main/document/document.php
index 4b040f2f4f..2c78a0b303 100755
--- a/main/document/document.php
+++ b/main/document/document.php
@@ -815,7 +815,7 @@ if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_fold
/* CREATE NEW DOCUMENT OR NEW DIRECTORY / GO TO UPLOAD / DOWNLOAD ZIPPED FOLDER */
// Create new document
- if (!$is_certificate_mode && !is_my_shared_folder($_user['user_id'], $curdirpath, $current_session_id)) {
+ if (!$is_certificate_mode) {
?>
@@ -823,12 +823,10 @@ if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_fold
}
// Create new draw
- if (!$is_certificate_mode && !is_my_shared_folder($_user['user_id'], $curdirpath, $current_session_id)) {
?>
-
\ No newline at end of file