objectManager: Only show the edit screen if the user has sufficient rights

2009-07-22 20:29:48 +02:00
parent 7b82cd1ef4
commit 1dfb1a24c6
1 changed files with 4 additions and 0 deletions
--- a/include/objectManager.php
+++ b/include/objectManager.php
@@ -393,6 +393,10 @@ class ObjectManager
            return;
        }

+        /* Only show the edit screen if the user has sufficient rights */
+        if(!$oObject->canEdit())
+            $this->error_exit('You do not have sufficient privileges to edit this entry');
+
        /* Display errors, if any, and fetch form data */
        if($this->displayErrors($sErrors))
        {