tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

#11317 Fix ACL Check

This commit is contained in:
miguel angel rasteu 2023-05-23 10:53:08 +02:00
parent 057a603f0c
commit 390f18e963
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pandora_console/extensions/module_groups.php
View File

@ -31,7 +31,7 @@ global $config;
check_login();
// ACL Check.
if (!check_acl($config['id_user'], 0, 'AR')) {
if (check_acl($config['id_user'], 0, 'AR') === 0 && check_acl($config['id_user'], 0, 'RR') === 0) {
db_pandora_audit(
AUDIT_LOG_ACL_VIOLATION,
'Trying to access Module Groups view'

9
pandora_console/general/logon_ok.php
View File

@ -33,6 +33,15 @@ require_once 'include/config.php';
global $config;
check_login();
// ACL Check.
if (check_acl($config['id_user'], 0, 'AR') === 0) {
db_pandora_audit(
AUDIT_LOG_ACL_VIOLATION,
'Trying to access Default view'
);
include 'general/noaccess.php';
exit;
}
require_once 'include/functions_reporting.php';
require_once 'include/functions_tactical.php';