tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-30 17:25:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

ACL improvements

Browse Source
This commit is contained in:
Alejandro Gallardo Escobar 2015-03-31 13:30:16 +02:00
parent 9bb62f1f43
commit 521845ee91
1 changed files with 21 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
pandora_console/operation/agentes/networkmap_list.php
View File

@ -38,36 +38,30 @@ if (is_ajax()) {
$delete_networkmaps = (bool) get_parameter('delete_networkmaps'); $delete_networkmaps = (bool) get_parameter('delete_networkmaps');
if ($delete_networkmaps) { if ($delete_networkmaps) {
if ( check_acl ($config['id_user'], 0, "RW") || check_acl ($config['id_user'], 0, "RM") ) {
if (check_acl ($config['id_user'], 0, "RM")) {
$result = false;
$results = array(); $results = array();
$ids_networkmap = (array) get_parameter ('ids_networkmap'); $ids_networkmap = (array) get_parameter('ids_networkmap');
foreach ($ids_networkmap as $id) { foreach ($ids_networkmap as $id) {
$store_group = (int) db_get_value('store_group', 'tnetwork_map', 'id_networkmap',$id_networkmap);
if (check_acl ($config['id_user'], $store_group, "RM")) {
$results[$id] = (bool) networkmap_delete_networkmap($id); $results[$id] = (bool) networkmap_delete_networkmap($id);
} }
echo json_encode($results); else if (check_acl ($config['id_user'], $store_group, "RW")) {
return;
}
else{
if (check_acl ($config['id_user'], 0, "RW")) {
$result = false;
$results = array();
$ids_networkmap = (array) get_parameter ('ids_networkmap');
foreach ($ids_networkmap as $id) {
$results[$id] = (bool) networkmap_delete_user_networkmap($config['id_user'], $id); $results[$id] = (bool) networkmap_delete_user_networkmap($config['id_user'], $id);
} }
}
// None permission
if (!empty($ids_networkmap) && empty($results)) {
db_pandora_audit("ACL Violation", "Trying to access Networkmap deletion");
$results = -1;
}
echo json_encode($results); echo json_encode($results);
return; return;
} }
}
}else{
db_pandora_audit("ACL Violation",
"Trying to access Networkmap deletion");
echo json_encode(-1);
return;
}
}
return; return;
} }