ulysia/szurubooru
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed privileges in user view

Browse source
This commit is contained in:
Marcin Kurczewski 2014-05-06 19:03:13 +02:00
parent e610963d4b
commit 42b8049ae5
1 changed files with 10 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
src/Controllers/UserController.php
View file

@ -33,9 +33,17 @@ class UserController
$query = 'fav:' . $user->getName();
elseif ($tab == 'delete')
Access::assert(new Privilege(Privilege::DeleteUser));
{
Access::assert(new Privilege(
Privilege::DeleteUser,
Access::getIdentity($user)));
}
elseif ($tab == 'settings')
Access::assert(new Privilege(Privilege::ChangeUserSettings));
{
Access::assert(new Privilege(
Privilege::ChangeUserSettings,
Access::getIdentity($user)));
}
elseif ($tab == 'edit' and !(new EditUserJob)->canEditAnything(Auth::getCurrentUser()))
Access::fail();