Check permissions in account plugin

plainblack · May 25, 2011 · 8dbc72e · 8dbc72e
1 parent 53016ef
commit 8dbc72e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/WebGUI/Account.pm b/lib/WebGUI/Account.pm
@@ -172,6 +172,12 @@ sub callMethod {
         );
         return undef;
     }
+
+    unless ($self->canView) {
+        my $session = $self->session;
+        $session->output->print($session->privilege->insufficient);
+        return undef;
+    }
 
     #Try to call the method
     my $output = eval { $self->$method(@{$args}) };