From 1dfb1a24c607620339bf0587f65234aa6766858a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alexander=20Nicolaysen=20S=C3=B8rnes?= Date: Wed, 22 Jul 2009 20:29:48 +0200 Subject: [PATCH] objectManager: Only show the edit screen if the user has sufficient rights --- include/objectManager.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/include/objectManager.php b/include/objectManager.php index 0e1f0df..4235279 100644 --- a/include/objectManager.php +++ b/include/objectManager.php @@ -393,6 +393,10 @@ class ObjectManager return; } + /* Only show the edit screen if the user has sufficient rights */ + if(!$oObject->canEdit()) + $this->error_exit('You do not have sufficient privileges to edit this entry'); + /* Display errors, if any, and fetch form data */ if($this->displayErrors($sErrors)) {