diff options
| author | Jonathan Jaubart <dev@jaubart.com> | 2014-04-16 23:07:51 +0100 |
|---|---|---|
| committer | Jonathan Jaubart <dev@jaubart.com> | 2014-04-16 23:07:51 +0100 |
| commit | b5102f17d41c68e2914ca361975a72dafd55cba4 (patch) | |
| tree | 7df3dfc8c726b71fdc035de8c2b24a38bb443551 | |
| parent | e018bc79996b9930e98cb5e5c6a98bc96d50ae31 (diff) | |
| download | webtrees-b5102f17d41c68e2914ca361975a72dafd55cba4.tar.gz webtrees-b5102f17d41c68e2914ca361975a72dafd55cba4.tar.bz2 webtrees-b5102f17d41c68e2914ca361975a72dafd55cba4.zip | |
#128 - Wrong logic in Controllers' requireManagerLogin method
| -rw-r--r-- | library/WT/Controller/Ajax.php | 2 | ||||
| -rw-r--r-- | library/WT/Controller/Page.php | 2 | ||||
| -rw-r--r-- | library/WT/Controller/Simple.php | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/library/WT/Controller/Ajax.php b/library/WT/Controller/Ajax.php index 70fce74b6a..a4c338843b 100644 --- a/library/WT/Controller/Ajax.php +++ b/library/WT/Controller/Ajax.php @@ -44,7 +44,7 @@ class WT_Controller_Ajax extends WT_Controller_Base { public function requireManagerLogin($ged_id=WT_GED_ID) { if ( $ged_id==WT_GED_ID && !WT_USER_GEDCOM_ADMIN || - $ged_id!=WT_GED_ID && userGedcomAdmin(WT_USER_ID, $gedcom_id) + $ged_id!=WT_GED_ID && !userGedcomAdmin(WT_USER_ID, $ged_id) ) { header('HTTP/1.0 403 Access Denied'); exit; diff --git a/library/WT/Controller/Page.php b/library/WT/Controller/Page.php index 3c654b1605..b499c8efda 100644 --- a/library/WT/Controller/Page.php +++ b/library/WT/Controller/Page.php @@ -85,7 +85,7 @@ class WT_Controller_Page extends WT_Controller_Base { require_once WT_ROOT.'includes/functions/functions.php'; // for get_query_url if ( $ged_id==WT_GED_ID && !WT_USER_GEDCOM_ADMIN || - $ged_id!=WT_GED_ID && userGedcomAdmin(WT_USER_ID, $gedcom_id) + $ged_id!=WT_GED_ID && !userGedcomAdmin(WT_USER_ID, $ged_id) ) { header('Location: '.WT_LOGIN_URL.'?url='.rawurlencode(get_query_url())); exit; diff --git a/library/WT/Controller/Simple.php b/library/WT/Controller/Simple.php index 896494896c..97ed7e6840 100644 --- a/library/WT/Controller/Simple.php +++ b/library/WT/Controller/Simple.php @@ -52,7 +52,7 @@ class WT_Controller_Simple extends WT_Controller_Page { public function requireManagerLogin($ged_id=WT_GED_ID) { if ( $ged_id==WT_GED_ID && !WT_USER_GEDCOM_ADMIN || - $ged_id!=WT_GED_ID && userGedcomAdmin(WT_USER_ID, $gedcom_id) + $ged_id!=WT_GED_ID && !userGedcomAdmin(WT_USER_ID, $ged_id) ) { $this->addInlineJavascript('opener.window.location.reload(); window.close();'); exit; |