From 1586c48517571b614517a7adc80d99860c023cec Mon Sep 17 00:00:00 2001 From: Nate Date: Mon, 17 Feb 2020 18:19:40 -0700 Subject: [PATCH] Menu: Add explicit temporary permissions in delete() method. --- resources/classes/menu.php | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/resources/classes/menu.php b/resources/classes/menu.php index d49220036b..83dda1e149 100644 --- a/resources/classes/menu.php +++ b/resources/classes/menu.php @@ -115,6 +115,12 @@ if (!class_exists('menu')) { //delete the checked rows if (is_array($array) && @sizeof($array) != 0) { + //grant temporary permissions + $p = new permissions; + $p->add('menu_item_delete', 'temp'); + $p->add('menu_item_group_delete', 'temp'); + $p->add('menu_language_delete', 'temp'); + //execute delete $database = new database; $database->app_name = $this->app_name; @@ -122,6 +128,11 @@ if (!class_exists('menu')) { $database->delete($array); unset($array); + //revoke temporary permissions + $p->delete('menu_item_delete', 'temp'); + $p->delete('menu_item_group_delete', 'temp'); + $p->delete('menu_language_delete', 'temp'); + //set message message::add($text['message-delete']); }