tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-29 16:55:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

2011-02-15 Miguel de Dios <miguel.dedios@artica.es>

Browse Source 
* godmode/groups/group_list.php: moved check ACL bottom the ajax call and
	added other check ACL in the ajax call.
	
	Fixes: #3180588



git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@3839 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
mdtrooper 2011-02-15 11:12:32 +00:00
parent ccec340eaf
commit 5668e77202
2 changed files with 18 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pandora_console/ChangeLog
View File

@ -1,3 +1,10 @@
2011-02-15 Miguel de Dios <miguel.dedios@artica.es>
* godmode/groups/group_list.php: moved check ACL bottom the ajax call and
added other check ACL in the ajax call.
Fixes: #3180588
2011-02-15 Juan Manuel Ramon <juanmanuel.ramon@artica.es> 2011-02-15 Juan Manuel Ramon <juanmanuel.ramon@artica.es>
* include/functions_html.php: print_input_image function now uses skins. * include/functions_html.php: print_input_image function now uses skins.
* godmode/users/configure_profile.php: Added some variable initialization after * godmode/users/configure_profile.php: Added some variable initialization after

20
pandora_console/godmode/groups/group_list.php
View File

@ -17,18 +17,11 @@
// Load global vars // Load global vars
global $config; global $config;
check_login();
if (! give_acl($config['id_user'], 0, "PM")) {
pandora_audit("ACL Violation",
"Trying to access Group Management");
require ("general/noaccess.php");
return;
}
require_once("include/functions_groups.php"); require_once("include/functions_groups.php");
if (is_ajax ()) { if (is_ajax ()) {
check_acl($config['id_user'], 0, "AR");
$get_group_json = (bool) get_parameter ('get_group_json'); $get_group_json = (bool) get_parameter ('get_group_json');
$get_group_agents = (bool) get_parameter ('get_group_agents'); $get_group_agents = (bool) get_parameter ('get_group_agents');
@ -78,6 +71,15 @@ if (is_ajax ()) {
return; return;
} }
check_login();
if (! give_acl($config['id_user'], 0, "PM")) {
pandora_audit("ACL Violation",
"Trying to access Group Management");
require ("general/noaccess.php");
return;
}
// Header // Header
print_page_header (__("Groups defined in Pandora"), "images/god1.png", false, "", true, ""); print_page_header (__("Groups defined in Pandora"), "images/god1.png", false, "", true, "");