From 823e7bf76ec3890d5038facc71a83ef74d9913ab Mon Sep 17 00:00:00 2001 From: Uwe Steinmann Date: Thu, 21 Apr 2016 17:19:58 +0200 Subject: [PATCH] better handling of access rights if advanced access rights are turn off check_view_access() returns true for admins and false otherwise --- inc/inc.ClassAccessOperation.php | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/inc/inc.ClassAccessOperation.php b/inc/inc.ClassAccessOperation.php index b350e8b69..d5e2d5732 100644 --- a/inc/inc.ClassAccessOperation.php +++ b/inc/inc.ClassAccessOperation.php @@ -360,8 +360,12 @@ class SeedDMS_AccessOperation { * no specific access right is set, otherwise false */ function check_view_access($view, $get=array()) { /* {{{ */ - if(!$this->settings->_advancedAcl) - return true; + if(!$this->settings->_advancedAcl) { + if($this->user->isAdmin()) + return true; + else + return false; + } if(is_string($view)) { $scripts = array($view); } elseif(is_array($view)) {