From 2cdf18ca58acbc77faecfb938f7fbe35aba02517 Mon Sep 17 00:00:00 2001
From: cdujeu <charles@ajaxplorer.info>
Date: Thu, 5 Feb 2015 14:48:00 +0100
Subject: [PATCH] Skip the locks for super admin only in server debug mode,
 otherwise DuoSecurity can be skipped.

---
 core/src/plugins/core.conf/class.AbstractAjxpUser.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/src/plugins/core.conf/class.AbstractAjxpUser.php b/core/src/plugins/core.conf/class.AbstractAjxpUser.php
index 90baebfe84..f925af0bba 100644
--- a/core/src/plugins/core.conf/class.AbstractAjxpUser.php
+++ b/core/src/plugins/core.conf/class.AbstractAjxpUser.php
@@ -223,7 +223,7 @@ public function removeLock()
 
     public function getLock()
     {
-        if($this->isAdmin() && $this->getGroupPath() == "/") return false;
+        if(AJXP_SERVER_DEBUG && $this->isAdmin() && $this->getGroupPath() == "/") return false;
         if (!empty($this->rights["ajxp.lock"])) {
             return $this->rights["ajxp.lock"];
         }