Also check that the current user has the right to upload file attachm…

…ents
WoltLab · Jun 17, 2024 · ee34e63 · ee34e63
1 parent b171e96
commit ee34e63
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/wcfsetup/install/files/lib/system/attachment/SignatureAttachmentObjectType.class.php b/wcfsetup/install/files/lib/system/attachment/SignatureAttachmentObjectType.class.php
@@ -173,6 +173,7 @@ private function canAddUser(): bool
  private function canEditUser(UserProfile $userProfile): bool
  {
  return WCF::getSession()->getPermission('admin.user.canEditUser')
- && UserGroup::isAccessibleGroup($userProfile->getGroupIDs());
+ && UserGroup::isAccessibleGroup($userProfile->getGroupIDs())
+ && WCF::getSession()->getPermission('user.signature.attachment.canUpload');
  }
 }