fixes #5067 - elgg_get_page_owner_guid() can bypass all access for the rest of the...

diff --git a/engine/lib/pageowner.php b/engine/lib/pageowner.php
index bf5901aadb44a9022f7d1987541583a548fb0fe2..7e8e6e430082277c4d62b4c77fc9af5f7591e028 100644 (file)
--- a/engine/lib/pageowner.php
+++ b/engine/lib/pageowner.php
@@ -113,6 +113,7 @@ function default_page_owner_handler($hook, $entity_type, $returnvalue, $params)
                }
 
                if ($user = get_user_by_username($username)) {
+                       elgg_set_ignore_access($ia);
                        return $user->getGUID();
                }
        }