diff --git a/pandora_console/ChangeLog b/pandora_console/ChangeLog index 761b3c009e..70acecc12a 100644 --- a/pandora_console/ChangeLog +++ b/pandora_console/ChangeLog @@ -1,3 +1,10 @@ +2011-02-15 Miguel de Dios + + * godmode/groups/group_list.php: moved check ACL bottom the ajax call and + added other check ACL in the ajax call. + + Fixes: #3180588 + 2011-02-15 Juan Manuel Ramon * include/functions_html.php: print_input_image function now uses skins. * godmode/users/configure_profile.php: Added some variable initialization after diff --git a/pandora_console/godmode/groups/group_list.php b/pandora_console/godmode/groups/group_list.php index ea1a3ca141..1dd1e3a638 100644 --- a/pandora_console/godmode/groups/group_list.php +++ b/pandora_console/godmode/groups/group_list.php @@ -17,18 +17,11 @@ // Load global vars global $config; -check_login(); - -if (! give_acl($config['id_user'], 0, "PM")) { - pandora_audit("ACL Violation", - "Trying to access Group Management"); - require ("general/noaccess.php"); - return; -} - require_once("include/functions_groups.php"); if (is_ajax ()) { + check_acl($config['id_user'], 0, "AR"); + $get_group_json = (bool) get_parameter ('get_group_json'); $get_group_agents = (bool) get_parameter ('get_group_agents'); @@ -78,6 +71,15 @@ if (is_ajax ()) { return; } +check_login(); + +if (! give_acl($config['id_user'], 0, "PM")) { + pandora_audit("ACL Violation", + "Trying to access Group Management"); + require ("general/noaccess.php"); + return; +} + // Header print_page_header (__("Groups defined in Pandora"), "images/god1.png", false, "", true, "");