From 540edf03168776ad68c14cf29b7166d487f19dcc Mon Sep 17 00:00:00 2001 From: Marco Villegas Date: Sun, 4 Dec 2011 01:39:47 -0500 Subject: [PATCH] Issue #1321334 by pwrovchz, marvil07: Fixed Access check on user's vote page. --- vud.module | 17 ++++++++++++----- 1 files changed, 12 insertions(+), 5 deletions(-) diff --git a/vud.module b/vud.module index d72c078..07dd416 100644 --- a/vud.module +++ b/vud.module @@ -164,12 +164,19 @@ function vud_perm() { return array('use vote up/down', 'administer vote up/down', 'access vote up/down statistics', 'reset vote up/down votes'); } - +/** + * Menu access callback for 'user/%user/vote_up_down/votes'. + * + * @see user_view_access() + */ function vud_can_see_votes($account) { - if ($account->status != 1) { - return user_view_access($account); - } - return user_access('access vote up/down statistics') || user_view_access($account); + return $account && $account->uid && + ( + // Administrators can view all accounts. + user_access('administer users') || + // The user is enabled and logged in at least once. + ($account->access && ($account->status == 1) && user_access('access vote up/down statistics')) + ); } /** -- 1.7.7.3