From e13be15f56edf7c2160f74ecc29412d2fa5b63d9 Mon Sep 17 00:00:00 2001 From: skeeter Date: Fri, 7 Sep 2001 18:30:35 +0000 Subject: [PATCH] should now disallow editing of records not allowed to. --- calendar/inc/class.uicalendar.inc.php | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/calendar/inc/class.uicalendar.inc.php b/calendar/inc/class.uicalendar.inc.php index 660bba4749..833e6b8c05 100755 --- a/calendar/inc/class.uicalendar.inc.php +++ b/calendar/inc/class.uicalendar.inc.php @@ -610,11 +610,10 @@ $cal_id = $GLOBALS['HTTP_GET_VARS']['cal_id']; $event = $this->bo->read_entry(intval($GLOBALS['HTTP_GET_VARS']['cal_id'])); - $can_edit = $this->bo->can_user_edit($event); - - if(!$can_edit) + if(!$this->bo->can_user_edit($event)) { $this->view(intval($GLOBALS['HTTP_GET_VARS']['cal_id'])); + $GLOBALS['phpgw']->common->phpgw_exit(); } if(@isset($GLOBALS['HTTP_POST_VARS']['edit_type']) && $GLOBALS['HTTP_POST_VARS']['edit_type'] == 'single') {