scl/szurubooru
1
0
Fork 0
mirror of https://github.com/rr-/szurubooru.git synced 2025-07-17 08:26:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed privileges in user view

Browse Source
This commit is contained in:
Marcin Kurczewski
2014-05-06 19:03:13 +02:00
parent e610963d4b
commit 42b8049ae5
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/Controllers/UserController.php
View File

@ -33,9 +33,17 @@ class UserController
$query = 'fav:' . $user->getName();
elseif ($tab == 'delete')
Access::assert(new Privilege(Privilege::DeleteUser));
{
Access::assert(new Privilege(
Privilege::DeleteUser,
Access::getIdentity($user)));
}
elseif ($tab == 'settings')
Access::assert(new Privilege(Privilege::ChangeUserSettings));
{
Access::assert(new Privilege(
Privilege::ChangeUserSettings,
Access::getIdentity($user)));
}
elseif ($tab == 'edit' and !(new EditUserJob)->canEditAnything(Auth::getCurrentUser()))
Access::fail();