add acl check

Author: lisps

action.php

@@ -60,6 +60,11 @@ function ajax_viewer_provider( Doku_Event &$event ) {
             'popupscript' => array()
         );
         $ID = getID('id');
+        
+        if (auth_quickaclcheck($ID) < AUTH_READ) {
+            echo "read permission error";
+            return;
+        }
 
         switch($event->data) {
             case '_popup_load_file' :