[dev] [cvs] commit: genie/lib Driver.php

[Chuck Hagenbuch]

Quoting Duck <duck at obala.net>:

>> >   Items has already their unique ID (autoincremented) so we don't
>> > need to check two indexes to get the item.
>>
>> I didn't look at the complete code, but this could be safeguard that
>> people can only change their own items.
>>
>> Jan.
>
> We already chack the Share permissions before the driver method is called.

But that doesn't ensure that the itemid belongs to the share that was checked.

-chuck