From d4f7c099691211f5744d7af562945dec1cfa8998 Mon Sep 17 00:00:00 2001
From: wlx <wangliangxu@lzb.ac.cn>
Date: Thu, 6 Sep 2012 08:54:08 +0000
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=E7=BC=BA=E5=A4=B1=E4=BB=A3?=
 =?UTF-8?q?=E7=A0=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 application/admin/controllers/DataController.php | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/application/admin/controllers/DataController.php b/application/admin/controllers/DataController.php
index 8ac314f6..a40b0244 100755
--- a/application/admin/controllers/DataController.php
+++ b/application/admin/controllers/DataController.php
@@ -2772,6 +2772,16 @@ class Admin_DataController extends Zend_Controller_Action
 			   				
 				// 1. 权限认定：当前用户必须和其owner相同
 				// 数据应当没有评审状态，没有作者信息
+				$sql="select uuid,data from geonetworkmetadata where id=?";
+				$sth=$this->db->prepare($sql);
+				$sth->execute(array($id));
+				$row=$sth->fetch();
+				if (empty($row))
+				{
+					$data = array("error"=>'无权限修改数据');
+					$this->jsonexit($data);
+					return true;
+				}
 				
 				// 保存数据作者信息