tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

2010-08-31 Sergio Martin <sergio.martin@artica.es> 

* operation/events/export_csv.php: Fixed ACLs to avoid
	to export system events to not administrators for bug 
	3053486



git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@3208 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
zarzuelo 2010-08-31 16:42:45 +00:00
parent 350508d03e
commit d8e6c20dee
2 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pandora_console/ChangeLog
View File

@ -1,3 +1,9 @@
2010-08-31 Sergio Martin <sergio.martin@artica.es>
* operation/events/export_csv.php: Fixed ACLs to avoid
to export system events to not administrators for bug
3053486
2010-08-31 Raúl Mateos <raulofpandora@gmail.com>
* godmode/reporting/reporting_builder.php,

7
pandora_console/operation/events/export_csv.php
View File

@ -71,14 +71,15 @@ $sql = get_db_all_rows_filter ('tevento', $filter, $fields, 'AND', true, true);
$new = true;
while ($event = get_db_all_row_by_steps_sql($new, $result, $sql)) {
$new = false;
if (! give_acl ($config["id_user"], $event["id_grupo"], "AR"))
if (!check_acl($config["id_user"], $event["id_grupo"], "AR") ||
(!check_acl($config["id_user"], 0, "PM") && $event["event_type"] == 'system'))
continue;
echo $event["timestamp"];
echo ",";
echo get_db_value ('nombre', 'tagente', 'id_agente', $event["id_agente"]);
echo get_agent_name($event["id_agente"]);
echo ",";
echo get_db_value ('nombre', 'tgrupo', 'id_grupo', $event["id_grupo"]);
echo get_group_name($event["id_grupo"]);
echo ",";
echo $event["evento"];
echo ",";