@@ -55,7 +55,7 @@ function dialogAction()
55
55
else
56
56
{
57
57
$ policyCheck =$ this ->Item ->policyCheck ($ element , $ this ->userSession ->Dao , MIDAS_POLICY_WRITE );
58
- $ isAdmin =$ this ->Item ->policyCheck ($ element , $ this ->userSession ->Dao , MIDAS_POLICY_WRITE );
58
+ $ isAdmin =$ this ->Item ->policyCheck ($ element , $ this ->userSession ->Dao , MIDAS_POLICY_ADMIN );
59
59
}
60
60
if ($ policyCheck ==false )
61
61
{
@@ -96,14 +96,24 @@ function dialogAction()
96
96
{
97
97
if ($ changeType =='group ' )
98
98
{
99
- $ policyDao =$ this ->Folderpolicyuser ->getPolicy ($ changePolicy , $ element );
99
+ $ policyDao =$ this ->Folderpolicyuser ->getPolicy ($ changePolicy , $ element );
100
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
101
+ {
102
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
103
+ return ;
104
+ }
100
105
$ this ->Folderpolicygroup ->delete ($ policyDao );
101
106
$ policyDao ->setPolicy ($ changeVal );
102
107
$ this ->Folderpolicygroup ->save ($ policyDao );
103
108
}
104
109
else
105
110
{
106
- $ policyDao =$ this ->Folderpolicyuser ->getPolicy ($ changePolicy , $ element );
111
+ $ policyDao =$ this ->Folderpolicyuser ->getPolicy ($ changePolicy , $ element );
112
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
113
+ {
114
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
115
+ return ;
116
+ }
107
117
$ this ->Folderpolicygroup ->delete ($ policyDao );
108
118
$ policyDao ->setPolicy ($ changeVal );
109
119
$ this ->Folderpolicygroup ->save ($ policyDao );
@@ -113,14 +123,24 @@ function dialogAction()
113
123
{
114
124
if ($ changeType =='group ' )
115
125
{
116
- $ policyDao =$ this ->Itempolicygroup ->getPolicy ($ changePolicy , $ element );
126
+ $ policyDao =$ this ->Itempolicygroup ->getPolicy ($ changePolicy , $ element );
127
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
128
+ {
129
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
130
+ return ;
131
+ }
117
132
$ this ->Itempolicygroup ->delete ($ policyDao );
118
133
$ policyDao ->setPolicy ($ changeVal );
119
134
$ this ->Itempolicygroup ->save ($ policyDao );
120
135
}
121
136
else
122
137
{
123
- $ policyDao =$ this ->Itempolicyuser ->getPolicy ($ changePolicy , $ element );
138
+ $ policyDao =$ this ->Itempolicyuser ->getPolicy ($ changePolicy , $ element );
139
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
140
+ {
141
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
142
+ return ;
143
+ }
124
144
$ this ->Itempolicyuser ->delete ($ policyDao );
125
145
$ policyDao ->setPolicy ($ changeVal );
126
146
$ this ->Itempolicyuser ->save ($ policyDao );
@@ -146,11 +166,21 @@ function dialogAction()
146
166
if ($ removeType =='group ' )
147
167
{
148
168
$ policyDao =$ this ->Folderpolicyuser ->getPolicy ($ removePolicy , $ element );
169
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
170
+ {
171
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
172
+ return ;
173
+ }
149
174
$ this ->Folderpolicygroup ->delete ($ policyDao );
150
175
}
151
176
else
152
177
{
153
178
$ policyDao =$ this ->Folderpolicyuser ->getPolicy ($ removePolicy , $ element );
179
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
180
+ {
181
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
182
+ return ;
183
+ }
154
184
$ this ->Folderpolicygroup ->delete ($ policyDao );
155
185
}
156
186
}
@@ -159,11 +189,21 @@ function dialogAction()
159
189
if ($ removeType =='group ' )
160
190
{
161
191
$ policyDao =$ this ->Itempolicygroup ->getPolicy ($ removePolicy , $ element );
192
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
193
+ {
194
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
195
+ return ;
196
+ }
162
197
$ this ->Itempolicygroup ->delete ($ policyDao );
163
198
}
164
199
else
165
200
{
166
201
$ policyDao =$ this ->Itempolicyuser ->getPolicy ($ removePolicy , $ element );
202
+ if (!$ isAdmin &&$ policyDao ->getPolicy ()>=MIDAS_POLICY_ADMIN )
203
+ {
204
+ echo JsonComponent::encode (array (false ,$ this ->t ('Error ' )));
205
+ return ;
206
+ }
167
207
$ this ->Itempolicyuser ->delete ($ policyDao );
168
208
}
169
209
}
0 commit comments