our implementation of "aspects" functionally complete

[friendica.git] / include / security.php

diff --git a/include/security.php b/include/security.php
index 8b34525349bf337d891f7a51abba7500ce1d72d0..29334549b1fa543667091cc4032a5d85cbb94d04 100644 (file)
--- a/include/security.php
+++ b/include/security.php
@@ -6,9 +6,12 @@ function can_write_wall(&$a,$owner) {
         if((local_user()) && ($_SESSION['uid'] == $owner))
                 return true;
 
-        $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `id` = %d AND `blocked` = 0",
+        $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `id` = %d AND `blocked` = 0 AND `pending` = 0 
+               AND `readonly` = 0  AND `rel` IN ( %d , %d ) LIMIT 1",
                 intval($owner),
-                intval($_SESSION['visitor_id'])
+                intval($_SESSION['visitor_id']),
+               intval(DIRECTION_OUT),
+               intval(DIRECTION_BOTH)
         );
         if(count($r))
                 return true;