admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Task #1127 - Ajout évenement depuis tableau de bord ou agenda

Browse source 
#1127 add security
This commit is contained in:
Dany De Bontridder 2015-08-15 08:41:47 +02:00
parent a04bccd5d5
commit 36b21ccde4
4 changed files with 44 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

21
include/class_user.php
View file

@ -1113,6 +1113,25 @@ class User
user_name=$1", array($this->login));
return $profile;
}
/**
* Check if the current user can add an action in the profile given
* in parameter
* @param type $p_profile profile.p_id = action_gestion.ag_dest
* @return boolean
*/
function can_add_action($p_profile)
{
$r=$this->db->get_value (' select count(*)
from user_sec_action_profile
where p_granted=$1
and p_id=$2',
array($this->get_profile(),$p_profile));
if ($r == 0 )
{
return false;
}
return true;
}
/**
*Check if the profile of the user can write for this profile
* @param $dtoc action_gestion.ag_id
@ -1122,7 +1141,7 @@ class User
{
if ( $this->Admin() == 1 ) return true;
$profile = $this->get_profile();
$r = $this->db->get_value(" select count(*) from action_gestion where ag_id=$1 and ag_dest in
$r = $this->db->get_value(" select count(*) from action_gestion where ag_id=$1 and ag_dest in
(select p_granted from user_sec_action_profile where ua_right='W' and p_id=$2) ", array($dtoc, $profile));
if ($r == 0)
return false;