tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

#10861 change permisions api functions

This commit is contained in:
Jonathan 2023-05-09 17:28:54 +02:00
parent 3775737708
commit 66e1de90df
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
pandora_console/include/functions_api.php
View File

@ -11640,7 +11640,7 @@ function api_set_add_user_profile($id, $thrash1, $other, $thrash2)
return; return;
} }
if (!check_acl($config['id_user'], 0, 'PM')) { if (!check_acl($config['id_user'], 0, 'UM')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -11664,7 +11664,7 @@ function api_set_add_user_profile($id, $thrash1, $other, $thrash2)
return; return;
} }
if (!check_acl($config['id_user'], $group, 'PM')) { if (!check_acl($config['id_user'], $group, 'UM')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -11699,7 +11699,7 @@ function api_set_delete_user_profile($id, $thrash1, $other, $thrash2)
return; return;
} }
if (!check_acl($config['id_user'], 0, 'PM')) { if (!check_acl($config['id_user'], 0, 'UM')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -11723,7 +11723,7 @@ function api_set_delete_user_profile($id, $thrash1, $other, $thrash2)
return; return;
} }
if (!check_acl($config['id_user'], $group, 'PM')) { if (!check_acl($config['id_user'], $group, 'UM')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -11756,7 +11756,7 @@ function api_get_user_profiles_info($thrash1, $thrash2, $thrash3, $returnType)
{ {
global $config; global $config;
if (!check_acl($config['id_user'], 0, 'PM')) { if (!check_acl($config['id_user'], 0, 'UM')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -16969,7 +16969,7 @@ function api_set_delete_user_permission($thrash1, $thrash2, $other, $returnType)
{ {
global $config; global $config;
if (!check_acl($config['id_user'], 0, 'AW')) { if (!check_acl($config['id_user'], 0, 'UM')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }