Checking permissions in status- & discount import

application/PreorderDiscount/PreorderDiscountController.php

@@ -32,6 +32,7 @@ class PreorderDiscountController extends mfBaseController {
             }
 
             $i = 0;
+            $forbidden = 0;
             $notfound = 0;
             $exists = 0;
             $saved = 0;
@@ -55,6 +56,11 @@ class PreorderDiscountController extends mfBaseController {
                     continue;
                 }
 
+                if($preorder->campaign->network->owner_id != $this->me->address_id) {
+                    $forbidden++;
+                    continue;
+                }
+
                 $discount_code = PreorderDiscountModel::getFirst(["code" => $code, "preorer_id" => $preorder->id]);
                 if($discount_code) {
                     $exists++;
@@ -79,6 +85,9 @@ class PreorderDiscountController extends mfBaseController {
             if($notfound) {
                 $message .= "<br />$notfound Bestellungen nicht gefunden";
             }
+            if($forbidden) {
+                $message .= "<br />$forbidden Bestellungen in falschem Netzgebiet";
+            }
             if($exists) {
                 $message .= "<br />$exists Gutscheincodes schon verknüpft";
             }