Changeset 1684 for trunk/jabberit_messenger

Timestamp:

11/20/09 08:28:07 (14 years ago)

Author:

niltonneto

Message:

Ticket #773 - Correção de problema crítico no acesso indevido aos links do Admin.

Location:

trunk/jabberit_messenger/inc

Files:

• class.uiconforganization.inc.php (modified) (1 diff)
• class.uigroupslocked.inc.php (modified) (1 diff)
• class.uihostsjabber.inc.php (modified) (1 diff)
• class.uimodule.inc.php (modified) (1 diff)

trunk/jabberit_messenger/inc/class.uiconforganization.inc.php

@@ -90 +90 @@
         public final function backPage()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }               
                 

trunk/jabberit_messenger/inc/class.uigroupslocked.inc.php

@@ -112 +112 @@
         public final function add()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }               
                 

trunk/jabberit_messenger/inc/class.uihostsjabber.inc.php

@@ -97 +97 @@
         public final function backPage()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }               
                 

trunk/jabberit_messenger/inc/class.uimodule.inc.php

@@ -89 +89 @@
         public final function add()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }