2011-02-15 Miguel de Dios <miguel.dedios@artica.es>

* godmode/groups/group_list.php: moved check ACL bottom the ajax call and
	added other check ACL in the ajax call.
	
	Fixes: #3180588



git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@3839 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
mdtrooper 2011-02-15 11:12:32 +00:00
parent 5da4e23615
commit e0e545010e
2 changed files with 18 additions and 9 deletions

View File

@ -1,3 +1,10 @@
2011-02-15 Miguel de Dios <miguel.dedios@artica.es>
* godmode/groups/group_list.php: moved check ACL bottom the ajax call and
added other check ACL in the ajax call.
Fixes: #3180588
2011-02-15 Juan Manuel Ramon <juanmanuel.ramon@artica.es>
* include/functions_html.php: print_input_image function now uses skins.
* godmode/users/configure_profile.php: Added some variable initialization after

View File

@ -17,18 +17,11 @@
// Load global vars
global $config;
check_login();
if (! give_acl($config['id_user'], 0, "PM")) {
pandora_audit("ACL Violation",
"Trying to access Group Management");
require ("general/noaccess.php");
return;
}
require_once("include/functions_groups.php");
if (is_ajax ()) {
check_acl($config['id_user'], 0, "AR");
$get_group_json = (bool) get_parameter ('get_group_json');
$get_group_agents = (bool) get_parameter ('get_group_agents');
@ -78,6 +71,15 @@ if (is_ajax ()) {
return;
}
check_login();
if (! give_acl($config['id_user'], 0, "PM")) {
pandora_audit("ACL Violation",
"Trying to access Group Management");
require ("general/noaccess.php");
return;
}
// Header
print_page_header (__("Groups defined in Pandora"), "images/god1.png", false, "", true, "");