Changeset 32 for trunk/expressoAdmin1_2/inc/class.user.inc.php

Timestamp:

06/08/07 15:18:19 (17 years ago)

Author:

niltonneto

Message:

* empty log message *

File:

• trunk/expressoAdmin1_2/inc/class.user.inc.php (modified) (1 diff)

trunk/expressoAdmin1_2/inc/class.user.inc.php

@@ -235 +235 @@
                         $diff = array_diff($new_values, $old_values);
                         
+                        $manager_account_lid = $_SESSION['phpgw_session']['session_lid'];
+                        if ((!$this->functions->check_acl($manager_account_lid,'edit_users')) &&
+                                (!$this->functions->check_acl($manager_account_lid,'change_users_password')) &&
+                                (!$this->functions->check_acl($manager_account_lid,'edit_sambausers_attributes'))
+                                )
+                        {
+                                $return['status'] = false;
+                                $return['msg'] = 'Você não tem direito de editar informações de usuários.';
+                                return $return;
+                        }
+
+                        // Verifica o acesso do gerente
+                        if (!$this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
+                        {
+                                
+                        }
+                        
                         // Verifica o acesso do gerente
                         if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))