Congegni/sintonia
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

editPerms permission depends on perm setting of parent object now.

Browse source
This commit is contained in:
tomas 2004-12-18 01:57:11 +00:00
parent d384f42da0
commit d4718a6b96
1 changed files with 6 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
livesupport/modules/storageServer/var/html/gbHttp.php
View file

@ -23,7 +23,7 @@
Author : $Author: tomas $ Author : $Author: tomas $
Version : $Revision: 1.5 $ Version : $Revision: 1.6 $
Location : $ $ Location : $ $
------------------------------------------------------------------------------*/ ------------------------------------------------------------------------------*/
@ -33,7 +33,7 @@ require_once"gbHtml_h.php";
* storageServer WWW-form interface * storageServer WWW-form interface
* *
* @author $Author: tomas $ * @author $Author: tomas $
* @version $Revision: 1.5 $ * @version $Revision: 1.6 $
* @see Alib * @see Alib
* @see GreenBox * @see GreenBox
*/ */
@ -334,7 +334,8 @@ switch($_REQUEST['act']){
* @param allowDeny char, A or D * @param allowDeny char, A or D
*/ */
case"addPerm"; case"addPerm";
if($gb->checkPerm($userid, 'editPerms', $_REQUEST['id'])){ $parid = $gb->getparent($_REQUEST['oid']);
if($gb->checkPerm($userid, 'editPerms', $parid)){
$gb->addPerm($_REQUEST['subj'], $_REQUEST['permAction'], $gb->addPerm($_REQUEST['subj'], $_REQUEST['permAction'],
$_REQUEST['id'], $_REQUEST['allowDeny']); $_REQUEST['id'], $_REQUEST['allowDeny']);
}else{ }else{
@ -350,7 +351,8 @@ switch($_REQUEST['act']){
* @param permid int, local id of permission record * @param permid int, local id of permission record
*/ */
case"removePerm"; case"removePerm";
if($gb->checkPerm($userid, 'editPerms', $_REQUEST['oid'])) $parid = $gb->getparent($_REQUEST['oid']);
if($gb->checkPerm($userid, 'editPerms', $parid))
$gb->removePerm($_REQUEST['permid']); $gb->removePerm($_REQUEST['permid']);
else $_SESSION['alertMsg']='Access denied.'; else $_SESSION['alertMsg']='Access denied.';
$redirUrl="gbHtmlPerms.php?id=$id"; $redirUrl="gbHtmlPerms.php?id=$id";