commit 79040123611d02bbf90c97735616e8313a7c7483
parent 5126a204a68bc2956605266d12a04f8f91ec8ed8
Author: Jan Dankert <devnull@localhost>
Date: Sun, 6 Nov 2011 23:03:35 +0100
Security: Server-Error erzwingen, wenn Benutzer kein Administrator ist.
Diffstat:
3 files changed, 7 insertions(+), 2 deletions(-)
diff --git a/action/GroupAction.class.php b/action/GroupAction.class.php
@@ -45,7 +45,10 @@ class GroupAction extends Action
$this->group = new Group( $this->getRequestId() );
$this->group->load();
$this->setTemplateVar( 'groupid',$this->group->groupid );
- }
+ }
+
+
+ $this->requireAdmin();
}
diff --git a/action/ProjectAction.class.php b/action/ProjectAction.class.php
@@ -37,7 +37,7 @@ class ProjectAction extends Action
$this->project->load();
}
-
+ $this->requireAdmin();
}
diff --git a/action/UserAction.class.php b/action/UserAction.class.php
@@ -43,6 +43,8 @@ class UserAction extends Action
$this->user->load();
$this->setTemplateVar('userid',$this->user->userid);
}
+
+ $this->requireAdmin();
}