fix: Make sure user has Publish permission as well

ezsystems · Mar 8, 2018 · d86e1bd · d86e1bd
1 parent 80c792e
commit d86e1bd
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/bundle/Controller/ContentController.php b/src/bundle/Controller/ContentController.php
@@ -216,6 +216,18 @@ public function hasOnTheFlyCreateAccessAction(Request $request, string $language
                 );
             }
 
+            if (!$permissionResolver->canUser('content', 'publish', $contentCreateStruct, [$locationCreateStruct])) {
+                throw new UnauthorizedException(
+                    'content',
+                    'publish',
+                    [
+                        'contentTypeIdentifier' => $contentType->identifier,
+                        'parentLocationId' => $locationCreateStruct->parentLocationId,
+                        'languageCode' => $languageCode,
+                    ]
+                );
+            }
+
             $response->setData([
                 'access' => true,
             ]);