r180: The OR should be an AND in the permission checking expression

diff --git a/viewattachment.php b/viewattachment.php
index 8543af67687ee59d5a5bb67a1a13277c4d2a80cd..c7c4bd016fa2ca89b97b96f3a0a0eaa33ba53e17 100755 (executable)
--- a/viewattachment.php
+++ b/viewattachment.php
@@ -20,7 +20,7 @@ if (!$attachment)
        $message->error('alert: bad attachment');
 }
 
-if (!can_perform('cangetattach') OR !can_perform('caneditattach'))
+if (!can_perform('cangetattach') AND !can_perform('caneditattach'))
 {
        $message->error_permission();
 }