tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-28 16:24:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

ACL fixes

Browse Source
This commit is contained in:
Alejandro Gallardo Escobar 2015-04-10 12:34:19 +02:00
parent d25c32b76d
commit 488c4976b0
1 changed files with 17 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
pandora_console/godmode/reporting/visual_console_builder.data.php
View File

@ -17,21 +17,24 @@ global $config;
check_login (); check_login ();
// Visual console required if (empty($idVisualConsole)) {
if (empty($visualConsole)) { // ACL for the a new visual console
db_pandora_audit("ACL Violation", // if (!isset($vconsole_read))
"Trying to access report builder"); // $vconsole_read = check_acl ($config['id_user'], 0, "VR");
require ("general/noaccess.php"); if (!isset($vconsole_write))
exit; $vconsole_write = check_acl ($config['id_user'], 0, "VW");
if (!isset($vconsole_manage))
$vconsole_manage = check_acl ($config['id_user'], 0, "VM");
}
else {
// ACL for the existing visual console
// if (!isset($vconsole_read))
// $vconsole_read = check_acl ($config['id_user'], $idGroup, "VR");
if (!isset($vconsole_write))
$vconsole_write = check_acl ($config['id_user'], $idGroup, "VW");
if (!isset($vconsole_manage))
$vconsole_manage = check_acl ($config['id_user'], $idGroup, "VM");
} }
// ACL for the existing visual console
// if (!isset($vconsole_read))
// $vconsole_read = check_acl ($config['id_user'], $visualConsole['id_group'], "VR");
if (!isset($vconsole_write))
$vconsole_write = check_acl ($config['id_user'], $visualConsole['id_group'], "VW");
if (!isset($vconsole_manage))
$vconsole_manage = check_acl ($config['id_user'], $visualConsole['id_group'], "VM");
if (!$vconsole_write && !$vconsole_manage) { if (!$vconsole_write && !$vconsole_manage) {
db_pandora_audit("ACL Violation", db_pandora_audit("ACL Violation",