tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-28 00:04:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

2011-02-18 Javier Lanz <javier.lanz@artica.es>

Browse Source 
* operation/servers/view_server.php: Fixed ACL permissions
	* operation/servers/view_server_detail.php: Fixed ACL permissions
	* operation/menu.php: Let an "AR" user view 'Pandora servers' menu
	
	Fix: #3183477


git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@3923 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
javilanz 2011-02-18 13:28:13 +00:00
parent 87a6c20335
commit ac6b040470
4 changed files with 17 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pandora_console/ChangeLog
View File

@ -1,3 +1,11 @@
2011-02-18 Javier Lanz <javier.lanz@artica.es>
* operation/servers/view_server.php: Fixed ACL permissions
* operation/servers/view_server_detail.php: Fixed ACL permissions
* operation/menu.php: Let an "AR" user view 'Pandora servers' menu
Fix: #3183477
2011-02-18 Miguel de Dios <miguel.dedios@artica.es> 2011-02-18 Miguel de Dios <miguel.dedios@artica.es>
* include/ajax/visual_console_builder.ajax.php, * include/ajax/visual_console_builder.ajax.php,

6
pandora_console/operation/menu.php
View File

@ -132,7 +132,7 @@ if (give_acl ($config['id_user'], 0, "AR")) {
} }
// Agent read, Server read // Agent read, Server read
if (give_acl ($config['id_user'], 0, "PM")) { if (give_acl ($config['id_user'], 0, "AR")) {
// Server view // Server view
$menu["estado_server"]["text"] = __('Pandora servers'); $menu["estado_server"]["text"] = __('Pandora servers');
@ -146,12 +146,12 @@ if (give_acl ($config['id_user'], 0, "PM")) {
if ($servers === false) { if ($servers === false) {
$servers = array (); $servers = array ();
} }
if (give_acl ($config['id_user'], 0, "PM")) {
foreach ($servers as $serverItem) { foreach ($servers as $serverItem) {
$sub["operation/servers/view_server_detail&amp;server_id=".$serverItem["id_server"]]["text"] = $serverItem["name"]; $sub["operation/servers/view_server_detail&amp;server_id=".$serverItem["id_server"]]["text"] = $serverItem["name"];
} }
$menu["estado_server"]["sub"] = $sub; $menu["estado_server"]["sub"] = $sub;
}
//End of server view //End of server view
//End of server view //End of server view

2
pandora_console/operation/servers/view_server.php
View File

@ -21,7 +21,7 @@ require_once ("include/functions_servers.php");
check_login (); check_login ();
if (! give_acl ($config['id_user'], 0, "AR") && ! give_acl ($config['id_user'], 0, "AW")) { if (! give_acl ($config['id_user'], 0, "AR")) {
pandora_audit("ACL Violation", pandora_audit("ACL Violation",
"Trying to access Server view"); "Trying to access Server view");
require ("general/noaccess.php"); require ("general/noaccess.php");

4
pandora_console/operation/servers/view_server_detail.php
View File

@ -26,10 +26,10 @@ $options = "<li><a href='index.php?sec=estado_server&sec2=operation/servers/view
print_page_header (__('Pandora servers'), "images/server.png", false, "", false, $options); print_page_header (__('Pandora servers'), "images/server.png", false, "", false, $options);
if (! give_acl ($config['id_user'], 0, "AR")) { if (! give_acl ($config['id_user'], 0, "PM")) {
pandora_audit("ACL Violation", pandora_audit("ACL Violation",
"Trying to access recon task viewer"); "Trying to access recon task viewer");
require ("/general/noaccess.php"); require ("general/noaccess.php");
return; return;
} }