diff --git a/pandora_console/ChangeLog b/pandora_console/ChangeLog index 688dc50b27..e428124fe6 100644 --- a/pandora_console/ChangeLog +++ b/pandora_console/ChangeLog @@ -1,3 +1,8 @@ +2011-02-15 Javier Lanz + * godmode/groups/group_list.php: Fixed ACL checkings + + Fix #3175824 + 2011-02-15 Miguel de Dios * include/functions_db.php: added in function "get_agent_modules" the diff --git a/pandora_console/godmode/groups/group_list.php b/pandora_console/godmode/groups/group_list.php index 388679bf61..0b0f3f9596 100644 --- a/pandora_console/godmode/groups/group_list.php +++ b/pandora_console/godmode/groups/group_list.php @@ -22,8 +22,12 @@ check_login(); require_once("include/functions_groups.php"); if (is_ajax ()) { - check_acl($config['id_user'], 0, "AR"); - + if (! give_acl($config['id_user'], 0, "AR")) { + pandora_audit("ACL Violation", "Trying to access Group Management"); + require ("general/noaccess.php"); + return; + } + $get_group_json = (bool) get_parameter ('get_group_json'); $get_group_agents = (bool) get_parameter ('get_group_agents');