openrat-cms

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs

commit 79040123611d02bbf90c97735616e8313a7c7483
parent 5126a204a68bc2956605266d12a04f8f91ec8ed8
Author: Jan Dankert <devnull@localhost>
Date:   Sun,  6 Nov 2011 23:03:35 +0100

Security: Server-Error erzwingen, wenn Benutzer kein Administrator ist.

Diffstat:
action/GroupAction.class.php | 5++++-
action/ProjectAction.class.php | 2+-
action/UserAction.class.php | 2++
3 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/action/GroupAction.class.php b/action/GroupAction.class.php @@ -45,7 +45,10 @@ class GroupAction extends Action $this->group = new Group( $this->getRequestId() ); $this->group->load(); $this->setTemplateVar( 'groupid',$this->group->groupid ); - } + } + + + $this->requireAdmin(); } diff --git a/action/ProjectAction.class.php b/action/ProjectAction.class.php @@ -37,7 +37,7 @@ class ProjectAction extends Action $this->project->load(); } - + $this->requireAdmin(); } diff --git a/action/UserAction.class.php b/action/UserAction.class.php @@ -43,6 +43,8 @@ class UserAction extends Action $this->user->load(); $this->setTemplateVar('userid',$this->user->userid); } + + $this->requireAdmin(); }