Changeset 1919

Timestamp:

01/05/10 14:55:40 (14 years ago)

Author:

amuller

Message:

Ticket #597 - Melhorias nas permissoes do modulo gerenciador de arquivos

File:

• trunk/phpgwapi/inc/class.vfs_sql.inc.php (modified) (2 diffs)

trunk/phpgwapi/inc/class.vfs_sql.inc.php

@@ -1478 +1478 @@
                                 return False;
                         }
+                        if (!$this->acl_check (array(
+                                        'string'        => $data['from'],
+                                        'relatives'     => array ($t->mask),
+                                        'operation'     => PHPGW_ACL_DELETE
+                                ))
+                        )
+                        {
+                                return False;
+                        }
 
                         if ($this->file_exists (array(
@@ -1676 +1685 @@
                                 )
                         );
+                        if (!$this->acl_check (array(
+                                'string'        => $p->fake_full_path,
+                                'relatives'     => array ($p->mask),
+                                'operation'     => PHPGW_ACL_DELETE)
+                                )
+                        )
+                        {
+                                return False;
+                        }
+
                         if (!$this->file_exists (array(
                                         'string'        => $data['string'],