[1.7 / 1.7.1] Sending a postcard does not check image/cat view permissions

[V@no]

Because of this bug people are able see images through postcard creation page, which they dont have permissions to view.

Open postcards.php
Find:

Code:  [Select]  [Expand]  [Hide line numbers]

1	if (!check_permission("auth_sendpostcard", $cat_id)) {

Replace with:

Code:  [Select]  [Expand]  [Hide line numbers]

1 2 3 4 5 6 7 8 9 10 11 12 13 14

/*   FIX ACCESS RESTRICTED IMAGES   ORIGINAL BLOCK:   if (!check_permission("auth_sendpostcard", $cat_id)) { */  /*   FIX ACCESS RESTRICTED IMAGES   START REPLACE */   if (!check_permission("auth_viewcat", $cat_id) || !check_permission("auth_viewimage", $cat_id) || !check_permission("auth_sendpostcard", $cat_id)) { /*   FIX ACCESS RESTRICTED IMAGES   END REPLACE */