nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-31 18:46:02 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

More debugging of exactly how permissions are being assigned.

Browse Source
This commit is contained in:
Andrew McMillan 2006-11-09 00:27:56 +13:00
parent 23c4d6ce3a
commit 0e6b1fe0bf
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
htdocs/caldav.php
View File

@ -47,6 +47,7 @@ if ( !isset($path_split[1]) || $path_split[1] == '' ) {
unset($path_user_no);
unset($path_username);
$permissions = array("read" => 'read' );
dbg_error_log( "caldav", "Read permissions for user accessing /" );
}
else {
$path_username = $path_split[1];
@ -55,8 +56,13 @@ else {
if ( $qry->Exec("caldav") && $path_user_record = $qry->Fetch() ) {
$path_user_no = $path_user_record->user_no;
}
if ( $session->AllowedTo("Admin") || $session->user_no == $path_user_no ) {
if ( $session->AllowedTo("Admin") ) {
$permissions = array('read' => 'read', "write" => 'write' );
dbg_error_log( "caldav", "Full permissions for a systems administrator" );
}
else if ( $session->user_no == $path_user_no ) {
$permissions = array('read' => 'read', "write" => 'write' );
dbg_error_log( "caldav", "Full permissions for user accessing their own hierarchy" );
}
else if ( isset($path_user_no) ) {
/**
@ -69,6 +75,7 @@ else {
if ( strpos($permission_result,"R") ) $permissions['read'] = 'read';
if ( strpos($permission_result,"W") ) $permissions['write'] = 'write';
}
dbg_error_log( "caldav", "Restricted permissions for user accessing someone elses hierarchy: read=%s, write=%s", isset($permissions['read']), isset($permissions['write']) );
}
}