| Index: trunk/extensions/Storyboard/tags/Storyboard/Storyboard_body.php |
| — | — | @@ -64,7 +64,4 @@ |
| 65 | 65 | return array( $output, 'noparse' => true, 'isHTML' => true ); |
| 66 | 66 | } |
| 67 | 67 | |
| 68 | | -} |
| 69 | | - |
| 70 | | - |
| 71 | | - |
| | 68 | +} |
| \ No newline at end of file |
| Index: trunk/extensions/Storyboard/api/ApiQueryStories.php |
| — | — | @@ -61,8 +61,12 @@ |
| 62 | 62 | 'story_modified' |
| 63 | 63 | ) ); |
| 64 | 64 | |
| 65 | | - $isReview = !is_null( $params['review'] ) && $wgUser->isAllowed( 'storyreview' ); |
| | 65 | + $isReview = !is_null( $params['review'] ); |
| 66 | 66 | |
| | 67 | + if ( $isReview && !$wgUser->isAllowed( 'storyreview' ) ) { |
| | 68 | + $this->dieUsageMsg( array( 'badaccess-groups' ) ); |
| | 69 | + } |
| | 70 | + |
| 67 | 71 | if ( $isReview ) { |
| 68 | 72 | if ( !isset( $params['state'] ) ) { |
| 69 | 73 | $this->dieUsageMsg( array( 'missingparam', 'state' ) ); |
| — | — | @@ -193,6 +197,7 @@ |
| 194 | 198 | */ |
| 195 | 199 | public function getPossibleErrors() { |
| 196 | 200 | return array_merge( parent::getPossibleErrors(), array( |
| | 201 | + array( 'badaccess-groups' ), |
| 197 | 202 | array( 'missingparam', 'state' ), |
| 198 | 203 | ) ); |
| 199 | 204 | } |