X-Git-Url: http://git.osdn.net/view?p=nucleus-jp%2Fnucleus-jp-ancient.git;a=blobdiff_plain;f=nucleus%2Flibs%2FITEM.php;h=3a55fef0e46ce209d3cbf04deddd89592781fac2;hp=b9b151936b55423cf02d05d4e4f41eeac3b89485;hb=7c4cfb849dc4ae9a3c0d10e7f3f62d20fd41b7eb;hpb=c6a072dd47f03501b46b296b35244780ed2f08bf

diff --git a/nucleus/libs/ITEM.php b/nucleus/libs/ITEM.php
index b9b1519..3a55fef 100755
--- a/nucleus/libs/ITEM.php
+++ b/nucleus/libs/ITEM.php
@@ -156,7 +156,8 @@ class ITEM {
 		NucleusPlugin::_applyPluginOptions($aOptions, $itemid);
 		$manager->notify('PostPluginOptionsUpdate',array('context' => 'item', 'itemid' => $itemid, 'item' => array('title' => $i_title, 'body' => $i_body, 'more' => $i_more, 'closed' => $i_closed, 'catid' => $i_catid)));
 
-		if ($i_draftid > 0 && $member->canAlterItem($i_draftid) ) {
+		if ($i_draftid > 0) {
+			// delete permission is checked inside ITEM::delete()
 			ITEM::delete($i_draftid);
 		}
 
@@ -301,7 +302,11 @@ class ITEM {
 		global $manager, $member;
 
 		$itemid = intval($itemid);
-		if (!$member->canAlterItem($itemid)) return;
+		// check to ensure only those allow to alter the item can
+		// proceed
+		if (!$member->canAlterItem($itemid)) {
+			return 1;
+		}
 
 		$manager->notify('PreDeleteItem', array('itemid' => $itemid));