diff options
Diffstat (limited to 'engine/lib/annotations.php')
| -rw-r--r-- | engine/lib/annotations.php | 6 | 
1 files changed, 4 insertions, 2 deletions
| diff --git a/engine/lib/annotations.php b/engine/lib/annotations.php index 09158d6a3..a89d8c40b 100644 --- a/engine/lib/annotations.php +++ b/engine/lib/annotations.php @@ -425,7 +425,8 @@  		foreach ($where as $w)  			$query .= " $w and "; -		$query .= get_access_sql_suffix("a"); // Add access controls
 +		$query .= get_access_sql_suffix("a"); // Add access controls +		$query .= ' and ' . get_access_sql_suffix("e"); // Add access controls
  		if ($count) {
  			$row = get_data_row($query);
 @@ -595,7 +596,8 @@  		$query = "SELECT $sum(ms.string) as sum from {$CONFIG->dbprefix}annotations a JOIN {$CONFIG->dbprefix}entities e on a.entity_guid = e.guid JOIN {$CONFIG->dbprefix}metastrings ms on a.value_id=ms.id WHERE ";
  		foreach ($where as $w)
  			$query .= " $w and ";
 -		$query .= get_access_sql_suffix("a"); // now add access
 +		$query .= get_access_sql_suffix("a"); // now add access +		$query .= ' and ' . get_access_sql_suffix("e"); // now add access
  		$row = get_data_row($query);
  		if ($row)
 | 
