From 2d1f7b5c949903935e4096d2f00aad92f4c3e361 Mon Sep 17 00:00:00 2001 From: Sebastian Stehle Date: Mon, 4 Sep 2017 22:34:47 +0200 Subject: [PATCH] Check for published state when querying content. --- src/Squidex.Domain.Apps.Read/Contents/ContentQueryService.cs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/Squidex.Domain.Apps.Read/Contents/ContentQueryService.cs b/src/Squidex.Domain.Apps.Read/Contents/ContentQueryService.cs index 703c65bab..e8447af05 100644 --- a/src/Squidex.Domain.Apps.Read/Contents/ContentQueryService.cs +++ b/src/Squidex.Domain.Apps.Read/Contents/ContentQueryService.cs @@ -60,11 +60,13 @@ namespace Squidex.Domain.Apps.Read.Contents Guard.NotNull(user, nameof(user)); Guard.NotNullOrEmpty(schemaIdOrName, nameof(schemaIdOrName)); + var isFrontendClient = user.IsInClient("squidex-frontend"); + var schema = await FindSchemaAsync(app, schemaIdOrName); var content = await contentRepository.FindContentAsync(app, schema, id); - if (content == null) + if (content == null || (!content.IsPublished && !isFrontendClient)) { throw new DomainObjectNotFoundException(id.ToString(), typeof(ISchemaEntity)); }