holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix bug allowing delegated user to change type via action selectbox if they have no permission to

Browse Source
This commit is contained in:
Nathan Gray 2010-12-08 17:27:56 +00:00
parent 52a86d7477
commit a3d2d724ee
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
infolog/inc/class.infolog_ui.inc.php
View File

@ -891,6 +891,12 @@ class infolog_ui
break;
case 'type':
$action_msg = lang('changed type');
// Dont allow to change the type, if user has no delete rights from the group-owner
if ($id && !($this->bo->grants[$entry['info_owner']] & EGW_ACL_DELETE))
{
$failed++;
break;
}
$entry['info_type'] = $settings;
$this->bo->write($entry);
$success++;