phpgroupware-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-cvs] [18506] bugfix: missing control on browse that induce


From: Pascal Vilarem
Subject: [Phpgroupware-cvs] [18506] bugfix: missing control on browse that induced systematic denial if not admin
Date: Wed, 19 Mar 2008 09:29:27 +0000

Revision: 18506
          
http://svn.sv.gnu.org/viewvc/?view=rev&root=phpgroupware&revision=18506
Author:   maat
Date:     2008-03-19 09:29:26 +0000 (Wed, 19 Mar 2008)

Log Message:
-----------
bugfix: missing control on browse that induced systematic denial if not admin

Modified Paths:
--------------
    trunk/ged/inc/class.ged_ui.inc.php

Modified: trunk/ged/inc/class.ged_ui.inc.php
===================================================================
--- trunk/ged/inc/class.ged_ui.inc.php  2008-03-19 07:45:13 UTC (rev 18505)
+++ trunk/ged/inc/class.ged_ui.inc.php  2008-03-19 09:29:26 UTC (rev 18506)
@@ -977,7 +977,7 @@
                                {
                                        
$focused_version=$this->ged_dm->get_version_info($focused_version_id);
                                        
-                                       if ( 
isset($this->ged_dm->acl[$focused_element['element_id']]['statuses']) && 
is_array($this->ged_dm->acl[$focused_element['element_id']]['statuses']))
+                                       if ( 
isset($this->ged_dm->acl[$focused_element['element_id']]['statuses']) && 
is_array($this->ged_dm->acl[$focused_element['element_id']]['statuses']) && ! 
empty($this->ged_dm->acl[$focused_element['element_id']]['statuses']))
                                        {
                                                if ( ! 
in_array($focused_version['status'], 
$this->ged_dm->acl[$focused_element['element_id']]['statuses']));
                                                {






reply via email to

[Prev in Thread] Current Thread [Next in Thread]