From f109a963ccb30ae67491bb8be2c81381c624e66d Mon Sep 17 00:00:00 2001 From: Andrew McMillan Date: Sun, 14 Mar 2010 12:15:44 +1300 Subject: [PATCH] Correct privilege checking for modification of collection. --- inc/ui/collection-edit.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inc/ui/collection-edit.php b/inc/ui/collection-edit.php index de58808c..64b92776 100644 --- a/inc/ui/collection-edit.php +++ b/inc/ui/collection-edit.php @@ -59,7 +59,7 @@ if ( isset($privsql) ) { $privqry = new AwlQuery( $privsql, $params ); $privqry->Exec('admin-collection-edit'); $permissions = $privqry->Fetch(); - $can_write_collection = ($session->AllowedTo('Admin') || ($permissions->priv & privilege_to_bits('DAV::bind')) ); + $can_write_collection = ($session->AllowedTo('Admin') || (bindec($permissions->priv) & privilege_to_bits('DAV::bind')) ); } dbg_error_log("ERROR", "Can write collection: %s", ($can_write_collection? 'yes' : 'no') );