summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorandi <andi@splitbrain.org>2005-03-11 14:24:08 +0100
committerandi <andi@splitbrain.org>2005-03-11 14:24:08 +0100
commitdbbc6aa7ce26c6f7fa25e233787dc448806fea30 (patch)
treef25d79f098f900fc13065a1d2f18d87fba2ddb59
parentb1a1915c726b0a32b0bd4c55ed59709e996b8cec (diff)
downloadrpg-dbbc6aa7ce26c6f7fa25e233787dc448806fea30.tar.gz
rpg-dbbc6aa7ce26c6f7fa25e233787dc448806fea30.tar.bz2
permission check fixed
darcs-hash:20050311132408-9977f-212aa31223494e0eba53bfe41ed1613835ca0d2e.gz
-rw-r--r--inc/actions.php9
1 files changed, 4 insertions, 5 deletions
diff --git a/inc/actions.php b/inc/actions.php
index 1e86d6979..e660c136b 100644
--- a/inc/actions.php
+++ b/inc/actions.php
@@ -98,6 +98,8 @@ function act_clean($act){
* @author Andreas Gohr <andi@splitbrain.org>
*/
function act_permcheck($act){
+ global $INFO;
+
if(in_array($act,array('save','preview','edit'))){
if($INFO['exists']){
$permneed = AUTH_EDIT;
@@ -109,12 +111,9 @@ function act_permcheck($act){
}else{
$permneed = AUTH_READ;
}
- if(! auth_quickaclcheck($ID) >= $permneed){
- return 'denied';
- }
+ if($INFO['perm'] >= $permneed) return $act;
-
- return $act;
+ return 'denied';
}
/**