    public function checkPermissions (&$model, $action=null) {
        return Yii::app()->params->isAdmin || 
            (!$model->private || $model->uploadedBy === Yii::app()->user->name) && 
            $this->asa ('PermissionsBehavior')->checkPermissions ($model, $action);
    }
The product receives input or data, but it does
        not validate or incorrectly validates that the input has the
        properties that are required to process the data safely and
        correctly.