[Jifty-commit] r7201 - jifty/trunk/lib/Jifty/Plugin/REST

[Jifty commits]

Author: sartak
Date: Mon Jun  8 10:18:18 2009
New Revision: 7201

Modified:
   jifty/trunk/lib/Jifty/Plugin/REST/Dispatcher.pm

Log:
403 if the record is unreadable

Modified: jifty/trunk/lib/Jifty/Plugin/REST/Dispatcher.pm
==============================================================================
--- jifty/trunk/lib/Jifty/Plugin/REST/Dispatcher.pm	(original)
+++ jifty/trunk/lib/Jifty/Plugin/REST/Dispatcher.pm	Mon Jun  8 10:18:18 2009
@@ -614,6 +614,8 @@
 
     $rec->load_by_cols( $column => $key );
     $rec->id or abort(404);
+    $rec->current_user_can('read') or abort(403);
+
     outs( ['model', $model, $column, $key], $rec->jifty_serialize_format );
 }