check access for action info

This commit is contained in:
Uwe Steinmann 2016-03-04 09:39:22 +01:00
parent 795f03f8b8
commit 06346b956c

View File

@ -165,6 +165,7 @@ $(document).ready( function() {
$undeluserids = $this->params['undeluserids']; $undeluserids = $this->params['undeluserids'];
$workflowmode = $this->params['workflowmode']; $workflowmode = $this->params['workflowmode'];
$quota = $this->params['quota']; $quota = $this->params['quota'];
$accessop = $this->params['accessobject'];
?> ?>
<form action="../op/op.UsrMgr.php" method="post" enctype="multipart/form-data" name="form" id="form"> <form action="../op/op.UsrMgr.php" method="post" enctype="multipart/form-data" name="form" id="form">
<?php <?php
@ -496,6 +497,7 @@ $(document).ready( function() {
$undeluserids = $this->params['undeluserids']; $undeluserids = $this->params['undeluserids'];
$workflowmode = $this->params['workflowmode']; $workflowmode = $this->params['workflowmode'];
$quota = $this->params['quota']; $quota = $this->params['quota'];
$accessop = $this->params['accessobject'];
$this->htmlStartPage(getMLText("admin_tools")); $this->htmlStartPage(getMLText("admin_tools"));
$this->globalNavigation(); $this->globalNavigation();
@ -518,7 +520,9 @@ $(document).ready( function() {
?> ?>
</select> </select>
</div> </div>
<?php if($accessop->check_view_access($this, array('action'=>'info')) || $user->isAdmin()) { ?>
<div class="ajax" data-view="UsrMgr" data-action="info" <?php echo ($seluser ? "data-query=\"userid=".$seluser->getID()."\"" : "") ?>></div> <div class="ajax" data-view="UsrMgr" data-action="info" <?php echo ($seluser ? "data-query=\"userid=".$seluser->getID()."\"" : "") ?>></div>
<?php } ?>
</div> </div>
<div class="span8"> <div class="span8">