summaryrefslogtreecommitdiff
path: root/post.php
diff options
context:
space:
mode:
authorChristian Fowler <spider@viovio.com>2007-09-14 00:57:01 +0000
committerChristian Fowler <spider@viovio.com>2007-09-14 00:57:01 +0000
commita73e119be5983e5f4814e461d0fcfeed01d8d14e (patch)
tree1a29d0d7bf7ebea199a76c65503e1b05e1d94daf /post.php
parent55e75ea5e1015fe0bd8519121ea2e3e0c641456e (diff)
downloadblogs-a73e119be5983e5f4814e461d0fcfeed01d8d14e.tar.gz
blogs-a73e119be5983e5f4814e461d0fcfeed01d8d14e.tar.bz2
blogs-a73e119be5983e5f4814e461d0fcfeed01d8d14e.zip
update permission checks to use smpler verify methods
Diffstat (limited to 'post.php')
-rw-r--r--post.php11
1 files changed, 6 insertions, 5 deletions
diff --git a/post.php b/post.php
index 97a9fab..88ea36c 100644
--- a/post.php
+++ b/post.php
@@ -1,6 +1,6 @@
<?php
/**
- * @version $Header: /cvsroot/bitweaver/_bit_blogs/post.php,v 1.47 2007/09/11 01:32:19 spiderr Exp $
+ * @version $Header: /cvsroot/bitweaver/_bit_blogs/post.php,v 1.48 2007/09/14 00:57:01 spiderr Exp $
* @package blogs
* @subpackage functions
@@ -16,15 +16,17 @@
require_once( '../bit_setup_inc.php' );
$gBitSystem->verifyPackage( 'blogs' );
-$gBitSystem->verifyPermission( 'p_blogs_post' );
+
require_once( BLOGS_PKG_PATH.'lookup_post_inc.php' );
require_once( BLOGS_PKG_PATH.'BitBlog.php');
$gBlog = new BitBlog();
//must be owner or admin to edit an existing post
-if( $gContent->isValid() && !$gContent->hasEditPermission() ) {
- $gBitSystem->fatalError( tra( "You do not have permission to edit this post" ));
+if( $gContent->isValid() ) {
+ $gContent->verifyEditPermission();
+} else {
+ $gBitSystem->verifyPermission( 'p_blogs_post' );
}
// Editing page needs general ticket verification
@@ -33,7 +35,6 @@ $gBitUser->verifyTicket();
// nuke post if requested
if( !empty( $_REQUEST['action'] ) ) {
if( $_REQUEST['action'] == 'remove' && $gContent->isValid() ) {
- $gContent->verifyPermission( 'p_blogs_post_edit' );
if( isset( $_REQUEST["confirm"] ) ) {
$redirect = !empty( $gContent->mInfo['blogs'] ) ? BLOGS_PKG_URL.'view.php?content_id='.key( $gContent->mInfo['blogs'] ) : BLOGS_PKG_URL;