[1.7 / 1.7.1] Sending a postcard does not check image/cat view permissions

[V@no]

Because of this bug people are able see images through postcard creation page, which they dont have permissions to view.

Open postcards.php
Find:

Code: [Select]

  if (!check_permission("auth_sendpostcard", $cat_id)) {
Replace with:

Code: [Select]

/*
  FIX ACCESS RESTRICTED IMAGES
  ORIGINAL BLOCK:
  if (!check_permission("auth_sendpostcard", $cat_id)) {
*/ 
/*
  FIX ACCESS RESTRICTED IMAGES
  START REPLACE
*/
  if (!check_permission("auth_viewcat", $cat_id) || !check_permission("auth_viewimage", $cat_id) || !check_permission("auth_sendpostcard", $cat_id)) {
/*
  FIX ACCESS RESTRICTED IMAGES
  END REPLACE
*/