dinislage/PrestaShop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

// Add rights checking for object editing/adding

Browse Source
This commit is contained in:
tDidierjean
2011-11-03 10:52:50 +00:00
parent 36d5969255
commit f0b150df71
1 changed files with 29 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
classes/AdminController.php
+29 -5
View File
@@ -1476,14 +1476,38 @@ class AdminControllerCore extends Controller
}
else if (Tools::getValue('submitAdd'.$this->table))
{
$this->action = 'save';
$this->display = 'edit';
//$this->id_entity = (int)$_GET['id_'.$this->table];
// case 1: updating existing entry
if ((int)(Tools::getValue('id_'.$this->table)))
{
if ($this->tabAccess['edit'] === '1')
{
$this->action = 'save';
$this->display = 'edit';
}
else
$this->_errors[] = Tools::displayError('You do not have permission to edit here.');
}
// case 2: creating new entry
else
{
if ($this->tabAccess['add'] === '1')
{
$this->action = 'save';
$this->display = 'edit';
}
else
$this->_errors[] = Tools::displayError('You do not have permission to add here.');
}
}
else if (isset($_GET['add'.$this->table]))
{
$this->action = 'new';
$this->display = 'add';
if ($this->tabAccess['add'] === '1')
{
$this->action = 'new';
$this->display = 'add';
}
else
$this->_errors[] = Tools::displayError('You do not have permission to add here.');
}
else if (isset($_GET['update'.$this->table]) && isset($_GET['id_'.$this->table]))
{