mirror of
https://github.com/pandorafms/pandorafms.git
synced 2025-07-29 16:55:05 +02:00
ACL improvements
This commit is contained in:
parent
9bb62f1f43
commit
521845ee91
@ -38,36 +38,30 @@ if (is_ajax()) {
|
||||
|
||||
$delete_networkmaps = (bool) get_parameter('delete_networkmaps');
|
||||
if ($delete_networkmaps) {
|
||||
if ( check_acl ($config['id_user'], 0, "RW") || check_acl ($config['id_user'], 0, "RM") ) {
|
||||
if (check_acl ($config['id_user'], 0, "RM")) {
|
||||
$result = false;
|
||||
|
||||
$results = array();
|
||||
$ids_networkmap = (array) get_parameter ('ids_networkmap');
|
||||
$ids_networkmap = (array) get_parameter('ids_networkmap');
|
||||
|
||||
foreach ($ids_networkmap as $id) {
|
||||
$store_group = (int) db_get_value('store_group', 'tnetwork_map', 'id_networkmap',$id_networkmap);
|
||||
|
||||
if (check_acl ($config['id_user'], $store_group, "RM")) {
|
||||
$results[$id] = (bool) networkmap_delete_networkmap($id);
|
||||
}
|
||||
echo json_encode($results);
|
||||
return;
|
||||
}
|
||||
else{
|
||||
if (check_acl ($config['id_user'], 0, "RW")) {
|
||||
$result = false;
|
||||
$results = array();
|
||||
$ids_networkmap = (array) get_parameter ('ids_networkmap');
|
||||
foreach ($ids_networkmap as $id) {
|
||||
else if (check_acl ($config['id_user'], $store_group, "RW")) {
|
||||
$results[$id] = (bool) networkmap_delete_user_networkmap($config['id_user'], $id);
|
||||
}
|
||||
}
|
||||
|
||||
// None permission
|
||||
if (!empty($ids_networkmap) && empty($results)) {
|
||||
db_pandora_audit("ACL Violation", "Trying to access Networkmap deletion");
|
||||
$results = -1;
|
||||
}
|
||||
|
||||
echo json_encode($results);
|
||||
return;
|
||||
}
|
||||
}
|
||||
}else{
|
||||
db_pandora_audit("ACL Violation",
|
||||
"Trying to access Networkmap deletion");
|
||||
echo json_encode(-1);
|
||||
return;
|
||||
}
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user