Merge pull request #3318 from nextcloud/backport/3316/stable1.4

[stable1.4] Additional check for stacks
nextcloud · Sep 14, 2021 · 5c8c73f · 5c8c73f
2 parents 31eb8d6 + fad63ac
commit 5c8c73f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Service/StackService.php b/lib/Service/StackService.php
@@ -48,7 +48,6 @@ class StackService {
 	private $assignedUsersMapper;
 	private $attachmentService;
 	private $activityManager;
-	private $symfonyAdapter;
 	private $changeHelper;
 
 	public function __construct(
@@ -110,6 +109,7 @@ public function find($stackId) {
 			throw new BadRequestException('stack id must be a number');
 		}
 
+		$this->permissionService->checkPermission($this->stackMapper, $stackId, Acl::PERMISSION_READ);
 		$stack = $this->stackMapper->find($stackId);
 		$cards = $this->cardMapper->findAll($stackId);
 		foreach ($cards as $cardIndex => $card) {