nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-20 16:56:02 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Decide whether we can write the principal before we refer to it...

Browse Source
This commit is contained in:
Andrew McMillan 2012-06-14 21:16:13 +12:00
parent 1cfc01758d
commit ec3996bca7
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
inc/ui/principal-edit.php
View File

@ -28,6 +28,12 @@ $privilege_xlate = array(
'schedule-send' => translate('Scheduling: Sending')
);
$can_write_principal = ($session->AllowedTo('Admin') || ($session->principal_id == $id));
if ( !$can_write_principal && $id > 0 ) {
$target_principal = new Principal('principal_id', $id);
$can_write_principal = $session->HavePrivilegeTo('DAV::write', $target_principal->dav_name());
}
$delete_collection_confirmation_required = null;
$delete_principal_confirmation_required = null;
@ -943,10 +949,6 @@ if ( isset($_GET['subaction']) ) {
$editor = principal_editor();
$page_elements[] = $editor;
$principal_path = '/'.$editor->Value('username').'/';
$can_write_principal = ($session->AllowedTo('Admin') || $session->principal_id == $id
|| $session->HavePrivilegeTo('DAV::write', $principal_path) );
if ( isset($id) && $id > 0 ) {
$c->stylesheets[] = 'css/browse.css';
$c->scripts[] = 'js/browse.js';