(fix): canEdit check before save on blogs

Minds · Oct 7, 2016 · 864164a · 864164a
1 parent 9d0b695
commit 864164a
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/plugins/blog/api/v1/blog.php b/plugins/blog/api/v1/blog.php
@@ -175,6 +175,13 @@ public function post($pages)
             //$blog->setMature($_POST['mature']);
         }
 
+        if (!$blog->canEdit()) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Sorry, you do not have permission'
+              ]);
+        }
+
         $blog->save();
 
         if (is_uploaded_file($_FILES['file']['tmp_name'])) {