diff --git a/pandora_console/ChangeLog b/pandora_console/ChangeLog index c26d234594..7d0bbbdfaf 100644 --- a/pandora_console/ChangeLog +++ b/pandora_console/ChangeLog @@ -1,3 +1,12 @@ +2014-01-23 Miguel de Dios + + * godmode/reporting/map_builder.php, + godmode/reporting/visual_console_builder.data.php: fixed the access + to user with operator read or and operator write in all group into + the visualmaps. + + Incident: #538 from local tracker + 2014-01-23 Miguel de Dios * godmode/reporting/visual_console_builder.editor.js, diff --git a/pandora_console/godmode/reporting/map_builder.php b/pandora_console/godmode/reporting/map_builder.php index 1e98f6b6b0..9bc0353e2b 100644 --- a/pandora_console/godmode/reporting/map_builder.php +++ b/pandora_console/godmode/reporting/map_builder.php @@ -157,9 +157,10 @@ $table->align[2] = 'center'; $table->align[3] = 'center'; $table->align[4] = 'center'; -// Only display maps of "All" group if user is administrator or has "PM" privileges, otherwise show only maps of user group +// Only display maps of "All" group if user is administrator +// or has "RR" privileges, otherwise show only maps of user group $own_info = get_user_info ($config['id_user']); -if ($own_info['is_admin'] || check_acl ($config['id_user'], 0, "PM")) +if ($own_info['is_admin'] || check_acl ($config['id_user'], 0, "RR")) $maps = visual_map_get_user_layouts (); else $maps = visual_map_get_user_layouts ($config['id_user'], false, false, false); diff --git a/pandora_console/godmode/reporting/visual_console_builder.data.php b/pandora_console/godmode/reporting/visual_console_builder.data.php index fb6180f1a4..29a9ca7724 100644 --- a/pandora_console/godmode/reporting/visual_console_builder.data.php +++ b/pandora_console/godmode/reporting/visual_console_builder.data.php @@ -78,8 +78,9 @@ $table->data[1][0] = __('Group:'); $groups = users_get_groups ($config['id_user'], 'RW'); $own_info = get_user_info($config['id_user']); -// Only display group "All" if user is administrator or has "PM" privileges -if ($own_info['is_admin'] || check_acl ($config['id_user'], 0, "PM")) +// Only display group "All" if user is administrator +// or has "RW" privileges +if ($own_info['is_admin'] || check_acl ($config['id_user'], 0, "RW")) $display_all_group = true; else $display_all_group = false;