fix logout if not admin

This commit is contained in:
Uwe Steinmann 2016-02-19 08:21:22 +01:00
parent d4e28ec735
commit 0e5e09dbbf

View File

@ -79,9 +79,9 @@ if (!is_object($user)) {
exit;
}
if($user->isAdmin() || $user->maySwitchToUser($su)) {
if($resArr["su"]) {
$user = $dms->getUser($resArr["su"]);
if($resArr["su"] && $su = $dms->getUser($resArr["su"])) {
if($user->isAdmin() || $user->maySwitchToUser($su)) {
$user = $su;
} else {
$session->resetSu();
}