From a0a86c3a98a6af158ecd2f1923feb752c82907db Mon Sep 17 00:00:00 2001
From: winter
Date: Sat, 15 Mar 2025 22:36:13 +0000
Subject: don't list pages the user can't view

---
 templates/pages/list_page.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'templates/pages/list_page.php')

diff --git a/templates/pages/list_page.php b/templates/pages/list_page.php
index e347e18..3c8488b 100644
--- a/templates/pages/list_page.php
+++ b/templates/pages/list_page.php
@@ -1,6 +1,7 @@
 <?php
 
 use Digitigrade\Model\Note;
+use Digitigrade\Model\UserAccount;
 
 call_template('skeleton', ['pageTitle' => __('note.page.list.pageTitle')], function () {
     ?>
@@ -9,7 +10,10 @@ call_template('skeleton', ['pageTitle' => __('note.page.list.pageTitle')], funct
 
     $notes = Note::findAllWithExtension(Note::EXTENSION_PAGES, 20);
     foreach ($notes as $note) {
-        call_template('pages/list_item', ['note' => $note]);
+        /** @var Note $note */
+        if ($note->isViewableBy(UserAccount::findByCurrentSession())) {
+            call_template('pages/list_item', ['note' => $note]);
+        }
     }
     if (count($notes) == 0) {
         call_template('placeholder_text');
-- 
cgit v1.3