From 7b03e13e6aaef18c9f98dd848df4686f01fbb091 Mon Sep 17 00:00:00 2001
From: konermann <konermann@8810af33-2d31-482b-a856-94f89814c4df>
Date: Mon, 25 Jul 2016 10:19:41 +0000
Subject: [PATCH] check if user is allowed to see A content asset

git-svn-id: https://svn.libreccm.org/ccm/trunk@4207 8810af33-2d31-482b-a856-94f89814c4df
---
 ccm-cms/src/com/arsdigita/cms/dispatcher/BaseAsset.java | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/ccm-cms/src/com/arsdigita/cms/dispatcher/BaseAsset.java b/ccm-cms/src/com/arsdigita/cms/dispatcher/BaseAsset.java
index 08cde7bb7..3e46efcc4 100755
--- a/ccm-cms/src/com/arsdigita/cms/dispatcher/BaseAsset.java
+++ b/ccm-cms/src/com/arsdigita/cms/dispatcher/BaseAsset.java
@@ -28,6 +28,7 @@ import com.arsdigita.domain.DomainObjectFactory;
 import com.arsdigita.mimetypes.MimeType;
 import com.arsdigita.persistence.OID;
 import com.arsdigita.toolbox.ui.OIDParameter;
+import com.arsdigita.web.Web;
 import org.apache.log4j.Logger;
 
 import java.io.IOException;
@@ -189,7 +190,9 @@ class BaseAsset extends ResourceHandlerImpl {
             return;
         }
 
-        setHeaders(response, asset);
-        send(response, asset);
+         if(asset.isLiveVersion()|| Web.getUserContext().isLoggedIn()){
+            setHeaders(response, asset);
+            send(response, asset);
+        }
     }
 }