bn8/ldapsaisie
1
0
Fork 0
mirror of https://gitlab.easter-eggs.com/ee/ldapsaisie.git synced 2024-06-29 15:03:43 +02:00
Code Issues Projects Releases Wiki Activity

Fix view access to specific autorized LSobject even if LSobject type is not in menu

Browse source
This commit is contained in:
Benjamin Renard 2017-03-23 16:41:34 +01:00
parent 8f037d8421
commit c0c64d3bef
1 changed files with 8 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
public_html/view.php
View file

@ -25,15 +25,16 @@ require_once 'core.php';
if(LSsession :: startLSsession()) {
if (isset($_REQUEST['LSobject'])) {
$LSobject = $_REQUEST['LSobject'];
$dn = isset($_REQUEST['dn'])?urldecode($_REQUEST['dn']):null;
if ( $LSobject == 'SELF' ) {
$LSobject = LSsession :: getLSuserObject() -> getType();
$dn = LSsession :: getLSuserObjectDn();
}
else {
$dn = isset($_REQUEST['dn'])?urldecode($_REQUEST['dn']):null;
}
if (LSsession :: in_menu($LSobject)) {
if (LSsession :: in_menu($LSobject) || LSsession :: canAccess($LSobject,$dn)) {
if ( $LSobject == 'SELF' ) {
$LSobject = LSsession :: getLSuserObject() -> getType();
$dn = LSsession :: getLSuserObjectDn();
}
if ( LSsession :: loadLSobject($LSobject) ) {
// Affichage d'un objet
if ( $dn!='' ) {