[evolvis-commits] r15137: More usage of session_require_perm
mirabilos at evolvis.org
mirabilos at evolvis.org
Mon Feb 28 23:46:14 CET 2011
Author: mirabilos
Date: 2011-02-28 23:46:14 +0100 (Mon, 28 Feb 2011)
New Revision: 15137
Modified:
trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php
trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php
Log:
More usage of session_require_perm
Modified: trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php
===================================================================
--- trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php 2011-02-28 22:46:08 UTC (rev 15136)
+++ trunk/gforge_base/evolvisforge-5.1/gforge/plugins/scmgit/www/index.php 2011-02-28 22:46:14 UTC (rev 15137)
@@ -14,7 +14,7 @@
switch ($func) {
case 'request-personal-repo':
$group_id = getStringFromRequest ('group_id') ;
- session_require (array('group' => $group_id)) ;
+ session_require_perm ('scm', $group_id, 'write') ;
$user = session_get_user(); // get the session user
$result = db_query_params ('SELECT * FROM plugin_scmgit_personal_repos p WHERE p.group_id=$1 AND p.user_id=$2',
array ($group_id,
Modified: trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php
===================================================================
--- trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php 2011-02-28 22:46:08 UTC (rev 15136)
+++ trunk/gforge_base/evolvisforge-5.1/gforge/plugins/wiki/www/themes/gforge/themeinfo.php 2011-02-28 22:46:14 UTC (rev 15137)
@@ -14,14 +14,14 @@
//group is private
if (!$project->isPublic()) {
- //if it's a private group, you must be a member of that group
- session_require(array('group'=>$group_id));
+ //if it's a private group, you must be a member of that group
+ session_require_perm ('project', $group_id) ;
}
//for dead projects must be member of admin project
if (!$project->isActive()) {
- //only SF group can view non-active, non-holding groups
- session_require(array('group'=>'1'));
+ //only SF group can view non-active, non-holding groups
+ session_require_global_perm ('forge_admin') ;
}
// FIXME: alcatel-lucent should not be hard-encoded here
More information about the evolvis-commits
mailing list