admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

UWVA#32983 Rechten beter controleren bij clone

Browse Source 
svn path=/Website/branches/v2015.1/; revision=25410
This commit is contained in:
Jos Groot Lipman
2015-06-08 08:07:01 +00:00
parent e271250c1d
commit 137bf09b66
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
APPL/API2/model_reportsx.inc
View File

@@ -73,6 +73,12 @@ function model_reportsx(usrrap_key, params)
this._analyze_fields = function (fields, params, jsondata) /* analyseer inkomende data, common voor PUT en POST */
{
if ("report" in jsondata)
jsondata = jsondata.report; // dereference
if (user.oslogin() != "_FACILITOR") // Die mag alles
{
user.auth_required_or_abort(this.is_safe_view(jsondata.viewname));
}
};
this._clone_report_cols = function(old_usrrap_key, new_model)
@@ -156,10 +162,6 @@ function model_reportsx(usrrap_key, params)
this.REST_POST = function _reportsx_REST_POST(params, jsondata) /* new report */
{
this._check_authorization(params, "POST");
if (user.oslogin() != "_FACILITOR") // Die mag alles
{
user.auth_required_or_abort(this.is_safe_view(jsondata.report.viewname));
}
var fields = api2.update_fields(params, this, jsondata); // Build updater
this._analyze_fields(fields, params, jsondata);