Changeset 1685 for branches/2.0/calendar

Timestamp:

11/20/09 08:28:42 (14 years ago)

Author:

niltonneto

Message:

Ticket #773 - Correção de problema crítico no acesso indevido aos links do Admin.

Location:

branches/2.0/calendar/inc

Files:

• class.uicustom_fields.inc.php (modified) (1 diff)
• class.uigroup_access.inc.php (modified) (2 diffs)
• class.uiholiday.inc.php (modified) (1 diff)

branches/2.0/calendar/inc/class.uicustom_fields.inc.php

@@ -40 +40 @@
                 function index($error='')
                 {
+                        if (!$GLOBALS['phpgw']->acl->check('run',1,'admin'))
+                        {
+                              $GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link('/admin/index.php'));
+                        }
                         unset($GLOBALS['phpgw_info']['flags']['noheader']);
                         unset($GLOBALS['phpgw_info']['flags']['nonavbar']);

branches/2.0/calendar/inc/class.uigroup_access.inc.php

@@ -33 +33 @@
         function index(){
                 
+                if (!$GLOBALS['phpgw']->acl->check('run',1,'admin'))
+                {
+                      $GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link('/admin/index.php'));
+                }
+
                 $GLOBALS['phpgw_info']['flags'] = array(
                                         'currentapp' => 'calendar',
@@ -66 +71 @@
                                 $scripts =      "<script src='".$module_name."/js/connector.js' type='text/javascript'></script>".
                                                         "<script type='text/javascript'>var DEFAULT_URL = '".$module_name."/controller.php?action=';</script> ".                                                                                        
-                                                        "<script src='".$this->template_dir."/js/search.js' type='text/javascript'></script>";                          
+                                                        "<script src='calendar/js/search.js' type='text/javascript'></script>";                         
                                 // Fim                          
                                 

branches/2.0/calendar/inc/class.uiholiday.inc.php

@@ -48 +48 @@
                 function admin()
                 {
+                        if (!$GLOBALS['phpgw']->acl->check('run',1,'admin'))
+                        {
+                              $GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link('/admin/index.php'));
+                        }
                         unset($GLOBALS['phpgw_info']['flags']['noheader']);
                         unset($GLOBALS['phpgw_info']['flags']['nonavbar']);