From 80476231610c777559ed855e614b0bdf9ba2ceb9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=B0=8F=E8=83=A1?= <3203164629@qq.com>
Date: Tue, 8 Oct 2024 08:40:05 +0000
Subject: [PATCH] =?UTF-8?q?=E9=99=90=E5=88=B6=E6=88=91=E7=9A=84=E7=BD=91?=
 =?UTF-8?q?=E7=9B=98=E5=8F=AA=E8=83=BD=E5=BD=93=E5=89=8D=E7=94=A8=E6=88=B7?=
 =?UTF-8?q?=E6=9C=89=E6=9D=83=E8=AE=BF=E9=97=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: 小胡 <3203164629@qq.com>
---
 core/class/perm/perm_check.php | 19 +++++--------------
 1 file changed, 5 insertions(+), 14 deletions(-)

diff --git a/core/class/perm/perm_check.php b/core/class/perm/perm_check.php
index f9b977f..36b66ae 100644
--- a/core/class/perm/perm_check.php
+++ b/core/class/perm/perm_check.php
@@ -63,17 +63,6 @@ class perm_check{
                 }else{ //继承上级，查找上级
                     if($folder['pfid']>0 && $folder['pfid']!=$folder['fid']){ //有上级目录
                         return self::getPerm($folder['pfid'],$bz,$i);
-                    }elseif (shareLink($_GET['shareLink'],$_GET['path'])){
-                        return perm_binPerm::getGroupPower('read');
-                    }elseif($folder = C::t('folder')->fetch_home_by_uid($_G['uid'])){//查看当前用户的个人网盘fid
-                        if($folder['fid']){
-                            if(!($folder['fid']==$fid)){//判断当前用户的个人网盘fid是否等于当前用户访问的fid
-                                $fids = get_all_chilrdenfid_by_pfid($folder['fid']);
-                                if (!(in_array($fid,$fids))){
-                                    return false;
-                                }
-                            }  
-                        } 
                     }else{   //其他的情况使用
                     	return self::getuserPerm();
                     }
@@ -178,6 +167,10 @@ class perm_check{
         if($_G['uid']<1){ //游客没有权限
             return false;
         }
+        if($_G['adminid']==1) return true; //网站管理员 有权限;
+        if (!$arr['gid'] && $arr['uid'] !== $_G['uid']) {//我的网盘文件只限于当前用户
+            return false;
+        }
         if(($bz && $bz!='dzz') || ($arr['bz'] && $arr['bz']!='dzz')){
             return self::checkperm_Container($arr['pfid'],$action,$bz?$bz:$arr['bz']);
         }else{
@@ -195,8 +188,6 @@ class perm_check{
                 //首先判断目录的超级权限；
                 if(!perm_FolderSPerm::isPower($folder['fsperm'],$action)) return false;
             }
-            if($_G['adminid']==1) return true; //网站管理员 有权限;
-           
             return self::checkperm_Container($arr['pfid'],$action,$bz);
         }
     }
@@ -232,4 +223,4 @@ class perm_check{
             }
         }
     }
-}
+}
\ No newline at end of file