added ability to check acl list when a client GETs member resource

Author: Kousuke Ebihara

lib/api/opAPI.class.php

@@ -351,4 +351,16 @@ public function setMemberId($id)
   {
     $this->member = Doctrine::getTable('Member')->find($id);
   }
+
+  public function getAcl($model)
+  {
+    if (!$this->member)
+    {
+      return null;
+    }
+
+    $builderName = 'op'.get_class($model).'AclBuilder';
+
+    return call_user_func($builderName.'::buildResource', $model, array($this->member));
+  }
 }

lib/api/opAPIMember.class.php

@@ -50,7 +50,15 @@ public function feed()
 
   public function entry()
   {
-    return $this->getRouteObject()->fetchOne();
+    $entry = $this->getRouteObject()->fetchOne();
+
+    $acl = $this->getAcl($entry);
+    if ($acl && !$acl->isAllowed($this->member->id, null, 'view'))
+    {
+      return false;
+    }
+
+    return $entry;
   }
 
   public function insert(SimpleXMLElement $xml)