DHLD#87206 Geheim token bij technisch adres igv vullen Gedeelde gebruiker

svn path=/Website/trunk/; revision=68850

APPL/PRS/prs_update_ajax.asp

@@ -16,8 +16,12 @@ var JSON_Result = true;
 %>
 <!--#include file="../Shared/common.inc"-->
 <!--#include file="./prs.inc" -->
-
 <%
+    protectRequest.validateToken();
+    user.checkAutorisation("WEB_PRSSYS");
+    var authparams = user.checkAutorisation("WEB_PRSMGT", true);
+    user.auth_required_or_abort(authparams && (authparams.ALGwritelevel < 9 || authparams.PRSwritelevel < 9));
+
     var req_info = getQParam("req_info");
     var filtercode = getQParam("", "");
     var result = { success: true 
@@ -41,5 +45,5 @@ var JSON_Result = true;
      }
 
     Response.Write(JSON.stringify(result));
- %>
+%>
 <% ASPPAGE_END(); %>