[evolvis-commits] r15137: More usage of session_require_perm

mirabilos at evolvis.org mirabilos at evolvis.org
Mon Feb 28 23:46:14 CET 2011


Author: mirabilos
Date: 2011-02-28 23:46:14 +0100 (Mon, 28 Feb 2011)
New Revision: 15137

Modified:
   trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php
   trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php
Log:
More usage of session_require_perm

Modified: trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php
===================================================================
--- trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php	2011-02-28 22:46:08 UTC (rev 15136)
+++ trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php	2011-02-28 22:46:14 UTC (rev 15137)
@@ -14,7 +14,7 @@
 switch ($func) {
 case 'request-personal-repo':
 	$group_id = getStringFromRequest ('group_id') ;
-	session_require (array('group' => $group_id)) ;
+	session_require_perm ('scm', $group_id, 'write') ;
 	$user = session_get_user(); // get the session user
 	$result = db_query_params ('SELECT * FROM plugin_scmgit_personal_repos p WHERE p.group_id=$1 AND p.user_id=$2',
 				   array ($group_id,

Modified: trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php
===================================================================
--- trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php	2011-02-28 22:46:08 UTC (rev 15136)
+++ trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php	2011-02-28 22:46:14 UTC (rev 15137)
@@ -14,14 +14,14 @@
         
         //group is private
         if (!$project->isPublic()) {
-            //if it's a private group, you must be a member of that group
-            session_require(array('group'=>$group_id));
+		//if it's a private group, you must be a member of that group
+		session_require_perm ('project', $group_id) ;
         }
 
         //for dead projects must be member of admin project
         if (!$project->isActive()) {
-            //only SF group can view non-active, non-holding groups
-            session_require(array('group'=>'1'));
+		//only SF group can view non-active, non-holding groups
+		session_require_global_perm ('forge_admin') ;
         }
 
                 // FIXME: alcatel-lucent should not be hard-encoded here



More information about the evolvis-commits mailing list