check parameter $mode of addAccess()

This commit is contained in:
Uwe Steinmann 2021-09-24 10:21:32 +02:00
parent ce124bb862
commit 959c75ff79

View File

@ -1375,6 +1375,9 @@ class SeedDMS_Core_Folder extends SeedDMS_Core_Object {
function addAccess($mode, $userOrGroupID, $isUser) { /* {{{ */
$db = $this->_dms->getDB();
if($mode < M_NONE || $mode > M_ALL)
return false;
$userOrGroup = ($isUser) ? "`userID`" : "`groupID`";
$queryStr = "INSERT INTO `tblACLs` (`target`, `targetType`, ".$userOrGroup.", `mode`) VALUES