nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-21 17:06:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Correct privilege checking for modification of collection.

Browse Source
This commit is contained in:
Andrew McMillan 2010-03-14 12:15:44 +13:00
parent f78655e952
commit f109a963cc
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
inc/ui/collection-edit.php
View File

@ -59,7 +59,7 @@ if ( isset($privsql) ) {
$privqry = new AwlQuery( $privsql, $params );
$privqry->Exec('admin-collection-edit');
$permissions = $privqry->Fetch();
$can_write_collection = ($session->AllowedTo('Admin') || ($permissions->priv & privilege_to_bits('DAV::bind')) );
$can_write_collection = ($session->AllowedTo('Admin') || (bindec($permissions->priv) & privilege_to_bits('DAV::bind')) );
}
dbg_error_log("ERROR", "Can write collection: %s", ($can_write_collection? 'yes' : 'no') );