ZaneYork
/
zoneminder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use instal of session for systemPermission

This commit is contained in:
Isaac Connor 2018-07-24 16:42:16 -04:00
parent 98f279addb
commit 8098051268
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
web/api/app/Controller/MonitorsController.php
View File

@ -119,8 +119,10 @@ class MonitorsController extends AppController {
public function add() {
if ( $this->request->is('post') ) {
if ( $this->Session->Read('systemPermission') != 'Edit' ) {
throw new UnauthorizedException(__('Insufficient privileges'));
global $user;
$canAdd = (!$user) || ($user['System'] == 'Edit' );
if ( !$canAdd ) {
throw new UnauthorizedException(__('Insufficient privileges'));
return;
}
@ -153,7 +155,8 @@ class MonitorsController extends AppController {
throw new NotFoundException(__('Invalid monitor'));
}
global $user;
if ( $user and $user['Monitors'] != 'Edit' ) {
$canEdit = (!$user) || ($user['Monitors'] == 'Edit');
if ( !$canEdit ) {
throw new UnauthorizedException(__('Insufficient privileges'));
return;
}