diff --git a/admin/editAppNote.php b/admin/editAppNote.php index 4f01240..590e746 100644 --- a/admin/editAppNote.php +++ b/admin/editAppNote.php @@ -18,7 +18,7 @@ if(!is_numeric($_REQUEST['noteId'])) $oNote = new Note($_REQUEST['noteId']); /* Check for privs */ -if(!$_SESSION['current']->isLoggedIn() || (!$_SESSION['current']->hasPriv("admin") && !$_SESSION['current']->isMaintainer($oNote->iVersionId) && !isSuperMaintainer($oNote->iAppId)) ) +if(!$_SESSION['current']->hasPriv("admin") && !$_SESSION['current']->isMaintainer($oNote->iVersionId) && !isSuperMaintainer($oNote->iAppId)) { errorpage("Insufficient Privileges!"); exit; diff --git a/admin/editAppVersion.php b/admin/editAppVersion.php index 0e20fb8..ac464ed 100644 --- a/admin/editAppVersion.php +++ b/admin/editAppVersion.php @@ -12,7 +12,7 @@ if(!is_numeric($_REQUEST['appId']) OR !is_numeric($_REQUEST['versionId'])) } /* Check for admin privs */ -if(!($_SESSION['current']->hasPriv("admin") || $_SESSION['current']->isMaintainer($_REQUEST['appId'],$_REQUEST['versionId']))) +if(!$_SESSION['current']->hasPriv("admin") && !$_SESSION['current']->isMaintainer($_REQUEST['versionId']) && !isSuperMaintainer($_REQUEST['appId'])) { errorpage("Insufficient Privileges!"); exit;