From 8bc0f7888bdddf452bbaa97c86e22b6ebc0aac58 Mon Sep 17 00:00:00 2001 From: Jean-Philippe Lang Date: Thu, 3 Dec 2009 21:16:08 +0000 Subject: [PATCH] Fixed: News from a project with 'news' module disabled, are still diplayed in the cross-project news list (#4333). git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3120 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- app/controllers/news_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/news_controller.rb b/app/controllers/news_controller.rb index 68d2b2a8..394b5182 100644 --- a/app/controllers/news_controller.rb +++ b/app/controllers/news_controller.rb @@ -26,7 +26,7 @@ class NewsController < ApplicationController def index @news_pages, @newss = paginate :news, :per_page => 10, - :conditions => (@project ? {:project_id => @project.id} : Project.visible_by(User.current)), + :conditions => Project.allowed_to_condition(User.current, :view_news, :project => @project), :include => [:author, :project], :order => "#{News.table_name}.created_on DESC" respond_to do |format|