mirror of
https://github.com/EGroupware/egroupware.git
synced 2025-06-24 20:01:36 +02:00
should now disallow editing of records not allowed to.
This commit is contained in:
parent
7a78f0f55d
commit
e13be15f56
@ -610,11 +610,10 @@
|
|||||||
$cal_id = $GLOBALS['HTTP_GET_VARS']['cal_id'];
|
$cal_id = $GLOBALS['HTTP_GET_VARS']['cal_id'];
|
||||||
$event = $this->bo->read_entry(intval($GLOBALS['HTTP_GET_VARS']['cal_id']));
|
$event = $this->bo->read_entry(intval($GLOBALS['HTTP_GET_VARS']['cal_id']));
|
||||||
|
|
||||||
$can_edit = $this->bo->can_user_edit($event);
|
if(!$this->bo->can_user_edit($event))
|
||||||
|
|
||||||
if(!$can_edit)
|
|
||||||
{
|
{
|
||||||
$this->view(intval($GLOBALS['HTTP_GET_VARS']['cal_id']));
|
$this->view(intval($GLOBALS['HTTP_GET_VARS']['cal_id']));
|
||||||
|
$GLOBALS['phpgw']->common->phpgw_exit();
|
||||||
}
|
}
|
||||||
if(@isset($GLOBALS['HTTP_POST_VARS']['edit_type']) && $GLOBALS['HTTP_POST_VARS']['edit_type'] == 'single')
|
if(@isset($GLOBALS['HTTP_POST_VARS']['edit_type']) && $GLOBALS['HTTP_POST_VARS']['edit_type'] == 'single')
|
||||||
{
|
{
|
||||||
|
Loading…
x
Reference in New Issue
Block a user