tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-9280-vista-mobile-permite-a-usuarios-acceder-a-nodos-para-los-que-no-tiene-permiso' into 'develop' 

fix mobile index access user to node pandora_enterprise#9280

See merge request artica/pandorafms!5023
This commit is contained in:
Diego Muñoz-Reja 2022-07-19 10:55:51 +00:00
parent 93e9992b19 44a2bb2bdb
commit 1f06b20745
1 changed files with 36 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

49
pandora_console/mobile/include/user.class.php
View File

@ -182,24 +182,47 @@ class User
$password = $system->getRequest('password', null); $password = $system->getRequest('password', null);
} }
if (!empty($user) && !empty($password)) { if (empty($user) === false
$user_in_db = process_user_login($user, $password); && empty($password) === false
if ($user_in_db !== false) { ) {
$this->logged = true; $user_in_db = db_get_row_filter(
$this->user = $user_in_db; 'tusuario',
$this->loginTime = time(); ['id_user' => $user],
$this->errorLogin = false; '*'
);
// The user login was successful, but the second step is not completed $this->logged = false;
if ($this->isDobleAuthRequired()) {
$this->needDoubleAuth = true;
}
} else {
$this->logged = false;
$this->loginTime = false; $this->loginTime = false;
$this->errorLogin = true; $this->errorLogin = true;
$this->needDoubleAuth = false; $this->needDoubleAuth = false;
$this->errorDoubleAuth = false; $this->errorDoubleAuth = false;
if ($user_in_db !== false) {
if (((bool) $user_in_db['is_admin'] === false)
&& ((bool) $user_in_db['not_login'] === true
|| (is_metaconsole() === false
&& has_metaconsole() === true
&& is_management_allowed() === false
&& (bool) $user_in_db['metaconsole_access_node'] === false))
) {
$this->logged = false;
$this->loginTime = false;
$this->errorLogin = true;
$this->needDoubleAuth = false;
$this->errorDoubleAuth = false;
} else {
$user_proccess_login = process_user_login($user, $password);
if ($user_proccess_login !== false) {
$this->logged = true;
$this->user = $user_proccess_login;
$this->loginTime = time();
$this->errorLogin = false;
// The user login was successful, but the second step is not completed.
if ($this->isDobleAuthRequired()) {
$this->needDoubleAuth = true;
}
}
}
} }
} }