Changeset 1316

Show
Ignore:
Timestamp:
11/29/07 00:02:42 (1 year ago)
Author:
rho
Message:

Tweak permissions check on userdetails actions

Signed-off: Rolando Espinoza La Fuente <rho@prosoftpeople.com>

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • devel/mod/users/lib/userdetails_actions.php

    r1301 r1316  
    99$action = optional_param('action'); 
    1010 
    11 if (logged_on && !empty($action) && run("permissions:check", array("userdetails:change",$id))) { 
     11// check permissions on both idents, 
     12// as $id and $page_owner are used in actions 
     13if (logged_on && !empty($action) 
     14    && run("permissions:check", array("userdetails:change",$id)) 
     15    && run("permissions:check", array("userdetails:change",$page_owner))) { 
    1216     
    1317    switch ($action) {