From 1e82a48e37a7e5e5125fe1556bb8eb3ddf6843ca Mon Sep 17 00:00:00 2001 From: Klaus Leithoff Date: Wed, 27 Oct 2010 08:44:45 +0000 Subject: [PATCH] * Infolog: Fix problem Delegated user was not able to edit infolog entrys owned by Groups, if he was not member of that group, and had no grouprights. Implicit rights where not applied; reported in Stylite Tracker#8255; --- infolog/inc/class.infolog_bo.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infolog/inc/class.infolog_bo.inc.php b/infolog/inc/class.infolog_bo.inc.php index fe40af292f..972000c8c0 100644 --- a/infolog/inc/class.infolog_bo.inc.php +++ b/infolog/inc/class.infolog_bo.inc.php @@ -776,7 +776,7 @@ class infolog_bo $values['info_owner'] = $this->group_owners[$values['info_type']]; if (!($this->grants[$this->group_owners[$values['info_type']]] & EGW_ACL_EDIT)) { - return false; // no edit rights from the group-owner + if (!$this->check_access($values['info_id'],EGW_ACL_EDIT)) return false; // no edit rights from the group-owner and no implicit rights (delegated and sufficient rights) } } elseif (!$values['info_id'] && !$values['info_owner'] || $GLOBALS['egw']->accounts->get_type($values['info_owner']) == 'g')