Version 4.1.19

applications/core/modules/front/system/announcement.php

@@ -2,9 +2,9 @@
 /**
  * @brief		Announcement
  * @author		<a href='http://www.invisionpower.com'>Invision Power Services, Inc.</a>
- * @copyright	(c) 2001 - SVN_YYYY Invision Power Services, Inc.
+ * @copyright	(c) 2001 - 2016 Invision Power Services, Inc.
  * @license		http://www.invisionpower.com/legal/standards/
- * @package		IPS Social Suite
+ * @package		IPS Community Suite
  * @since		09 Oct 2013
  * @version		SVN_VERSION_NUMBER
  */
@@ -46,6 +46,11 @@ class _announcement extends \IPS\Content\Controller
 		{
 			\IPS\Output::i()->error( 'announcement_missing', '2C199/1', 404, '' );
 		}
+
+		if ( !$announcement->canView() )
+		{
+			\IPS\Output::i()->error( 'node_error_no_perm', '2C199/2', 403, '' );
+		}
 		
 		/* Set Session Location */
 		\IPS\Session::i()->setLocation( \IPS\Http\Url::internal( 'app=core&module=system&controller=announcement&id=' . $announcement->id, NULL, 'announcement', $announcement->seo_title  ), array(), 'loc_viewing_announcement', array( $announcement->title => FALSE ) );