r893: Forgot to include a huge security check for listing bugs

diff --git a/syndicate.php b/syndicate.php
index 5340e15435b7febf492843ff895b241359c428f8..64bc35c947a35aa015563a953d91c610abb3313a 100644 (file)
--- a/syndicate.php
+++ b/syndicate.php
@@ -33,6 +33,11 @@ if (!defined('SYND_TYPE'))
        define('SYND_TYPE', 'atom');
 }
 
+if (!can_perform('canviewbugs'))
+{
+       $message->error_permission();
+}
+
 // ###################################################################
 // get the syndicated items and prepare their content