From 27d22befe018f042189f4f1bbbcfa963e905ca1d Mon Sep 17 00:00:00 2001 From: Klaus Leithoff Date: Wed, 27 Oct 2010 08:42:52 +0000 Subject: [PATCH] * Infolog: Fix problem Delegated user was not able to edit infolog entrys owned by Groups, if he was not member of that group, and had no grouprights. Implicit rights where not applied; reported in Stylite Tracker#8255; --- infolog/inc/class.infolog_bo.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infolog/inc/class.infolog_bo.inc.php b/infolog/inc/class.infolog_bo.inc.php index 658757b30a..89a8aa389c 100644 --- a/infolog/inc/class.infolog_bo.inc.php +++ b/infolog/inc/class.infolog_bo.inc.php @@ -776,7 +776,7 @@ class infolog_bo $values['info_owner'] = $this->group_owners[$values['info_type']]; if (!($this->grants[$this->group_owners[$values['info_type']]] & EGW_ACL_EDIT)) { - return false; // no edit rights from the group-owner + if (!$this->check_access($values['info_id'],EGW_ACL_EDIT)) return false; // no edit rights from the group-owner and no implicit rights (delegated and sufficient rights) } } elseif (!$values['info_id'] && !$values['info_owner'] || $GLOBALS['egw']->accounts->get_type($values['info_owner']) == 'g')