tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

2011-02-18 Javier Lanz <javier.lanz@artica.es> 

* operation/servers/view_server.php: Fixed ACL permissions
	* operation/servers/view_server_detail.php: Fixed ACL permissions
	* operation/menu.php: Let an "AR" user view 'Pandora servers' menu
	
	Fix: #3183477


git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@3923 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
javilanz 2011-02-18 13:28:13 +00:00
parent 4414864c68
commit 79fbcd9b75
4 changed files with 17 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pandora_console/ChangeLog
View File

@ -1,3 +1,11 @@
2011-02-18 Javier Lanz <javier.lanz@artica.es>
* operation/servers/view_server.php: Fixed ACL permissions
* operation/servers/view_server_detail.php: Fixed ACL permissions
* operation/menu.php: Let an "AR" user view 'Pandora servers' menu
Fix: #3183477
2011-02-18 Miguel de Dios <miguel.dedios@artica.es>
* include/ajax/visual_console_builder.ajax.php,

12
pandora_console/operation/menu.php
View File

@ -132,7 +132,7 @@ if (give_acl ($config['id_user'], 0, "AR")) {
}
// Agent read, Server read
if (give_acl ($config['id_user'], 0, "PM")) {
if (give_acl ($config['id_user'], 0, "AR")) {
// Server view
$menu["estado_server"]["text"] = __('Pandora servers');
@ -146,12 +146,12 @@ if (give_acl ($config['id_user'], 0, "PM")) {
if ($servers === false) {
$servers = array ();
}
foreach ($servers as $serverItem) {
$sub["operation/servers/view_server_detail&amp;server_id=".$serverItem["id_server"]]["text"] = $serverItem["name"];
if (give_acl ($config['id_user'], 0, "PM")) {
foreach ($servers as $serverItem) {
$sub["operation/servers/view_server_detail&amp;server_id=".$serverItem["id_server"]]["text"] = $serverItem["name"];
}
$menu["estado_server"]["sub"] = $sub;
}
$menu["estado_server"]["sub"] = $sub;
//End of server view
//End of server view

2
pandora_console/operation/servers/view_server.php
View File

@ -21,7 +21,7 @@ require_once ("include/functions_servers.php");
check_login ();
if (! give_acl ($config['id_user'], 0, "AR") && ! give_acl ($config['id_user'], 0, "AW")) {
if (! give_acl ($config['id_user'], 0, "AR")) {
pandora_audit("ACL Violation",
"Trying to access Server view");
require ("general/noaccess.php");

4
pandora_console/operation/servers/view_server_detail.php
View File

@ -26,10 +26,10 @@ $options = "<li><a href='index.php?sec=estado_server&sec2=operation/servers/view
print_page_header (__('Pandora servers'), "images/server.png", false, "", false, $options);
if (! give_acl ($config['id_user'], 0, "AR")) {
if (! give_acl ($config['id_user'], 0, "PM")) {
pandora_audit("ACL Violation",
"Trying to access recon task viewer");
require ("/general/noaccess.php");
require ("general/noaccess.php");
return;
}