diff --git a/pandora_console/godmode/servers/manage_recontask.php b/pandora_console/godmode/servers/manage_recontask.php
index 6160426eeb..86c55bf31f 100644
--- a/pandora_console/godmode/servers/manage_recontask.php
+++ b/pandora_console/godmode/servers/manage_recontask.php
@@ -32,6 +32,9 @@ if (check_acl ($config['id_user'], 0, "AW")) {
$options[]['text'] = "" . html_print_image ("images/operation.png", true, array ("title" =>__('View'))) . "";
}
+$user_groups = users_get_groups(false, 'AW', true, false, null, 'id_grupo');
+$user_groups = array_keys($user_groups);
+
// Headers
//ui_print_page_header (__('Manage recontask'), "images/gm_servers.png", false, "", true);
ui_print_page_header (__('Manage recontask'), "images/gm_servers.png", false, "", true, $options);
@@ -259,8 +262,9 @@ if ($result !== false) {
foreach ($result as $row) {
$data = array();
- $data[0] = ''.$row["name"].'';
-
+ //$data[0] = ''.$row["name"].'';
+ $data[0] = $row["name"];
+
if ($row["id_recon_script"] == 0)
$data[1] = $row["subnet"];
else
@@ -311,6 +315,20 @@ if ($result !== false) {
$data[7] = "-";
}
+ $task_group = $row["id_group"];
+
+ if (in_array($task_group, $user_groups)){
+ $data[8] = '' . html_print_image("images/eye.png", true) . '';
+ $data[8] .= '' . html_print_image("images/cross.png", true, array("border" => '0')) . '';
+ $data[8] .= '' .html_print_image("images/config.png", true) . '';
+
+ if($row["disabled"] == 0) {
+ $data[8] .= '' .html_print_image("images/lightbulb.png", true) . '';
+ }
+ else {
+ $data[8] .= '' .html_print_image("images/lightbulb_off.png", true) . '';
+ }
+ }
// ACTION
$data[8] = '' . html_print_image("images/eye.png", true) . '';
$data[8] .= '' . html_print_image("images/cross.png", true, array("border" => '0')) . '';
diff --git a/pandora_console/godmode/servers/manage_recontask_form.php b/pandora_console/godmode/servers/manage_recontask_form.php
index 72bf02fb7c..464ef3d4ac 100644
--- a/pandora_console/godmode/servers/manage_recontask_form.php
+++ b/pandora_console/godmode/servers/manage_recontask_form.php
@@ -27,6 +27,9 @@ if (! check_acl ($config['id_user'], 0, "AW")) {
require_once ($config['homedir'].'/include/functions_users.php');
+$user_groups = users_get_groups(false, 'AW', true, false, null, 'id_grupo');
+$user_groups = array_keys($user_groups);
+
if (is_ajax ()) {
$get_explanation = (bool) get_parameter('get_explanation', 0);
@@ -103,6 +106,14 @@ if (isset ($_GET["update"]) or (isset($_GET["crt"]))) {
$parent_detection = $row["parent_detection"];
$parent_recursion = $row["parent_recursion"];
$macros = $row["macros"];
+
+ if (! in_array($id_group, $user_groups)){
+ db_pandora_audit("ACL Violation",
+ "Trying to access Recon Task Management");
+ require ("general/noaccess.php");
+ return;
+ }
+
}
}
elseif (isset ($_GET["create"]) or isset($_GET["crt"])) {