Changeset 1685 for branches/2.0/jabberit_messenger

Timestamp:

11/20/09 08:28:42 (14 years ago)

Author:

niltonneto

Message:

Ticket #773 - Correção de problema crítico no acesso indevido aos links do Admin.

Location:

branches/2.0/jabberit_messenger/inc

Files:

• class.uiconforganization.inc.php (modified) (1 diff)
• class.uigroupslocked.inc.php (modified) (3 diffs)
• class.uihostsjabber.inc.php (modified) (1 diff)
• class.uimodule.inc.php (modified) (1 diff)

branches/2.0/jabberit_messenger/inc/class.uiconforganization.inc.php

@@ -90 +90 @@
         public final function backPage()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }               
                 

branches/2.0/jabberit_messenger/inc/class.uigroupslocked.inc.php

@@ -70 +70 @@
                 
                 $ous = "<option value='-1'>-- ".lang('Select Organization')." --</option>";     
+                
                 if( ($LdapOus = $ldap->getOrganizationsLdap()) )
                 {
-                        foreach($LdapOus as $tmp )
-                                $ous .= "<option value='".$tmp."'>".$tmp."</option>";
+                        foreach($LdapOus as $key=>$val )
+                                $ous .= "<option value='".$val."'>".$val."</option>";
                 }
-                
+
                 $groupsRestricts = "";
 
@@ -82 +83 @@
                         $glocked = explode(';',$GLOBALS['phpgw_info']['server']['groups_locked_jabberit']);
                         natcasesort($glocked);
-                        
+        
                         foreach( $glocked as $tmp ){
                                 $option = explode(":",$tmp);
@@ -111 +112 @@
         public final function add()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }               
                 

branches/2.0/jabberit_messenger/inc/class.uihostsjabber.inc.php

@@ -97 +97 @@
         public final function backPage()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }               
                 

branches/2.0/jabberit_messenger/inc/class.uimodule.inc.php

@@ -89 +89 @@
         public final function add()
         {
-                if($GLOBALS['phpgw']->acl->check('applications_access',1,'admin'))
+                if( !$GLOBALS['phpgw']->acl->check('run',1,'admin') )
                 {
-                        $GLOBALS['phpgw']->redirect_link('/index.php');
+                        $GLOBALS['phpgw']->redirect_link('/admin/index.php');
                 }