dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add permissions only if there are groups assigned to the user.

This commit is contained in:
Mark Crane 2014-06-10 21:16:42 +00:00
parent 2070de705e
commit 9458e5b51e
1 changed files with 16 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
resources/check_auth.php
View File

@ -303,23 +303,25 @@ require_once "resources/require.php";
unset($sql, $row_count, $prep_statement); unset($sql, $row_count, $prep_statement);
//get the permissions assigned to the groups that the user is a member of set the permissions in $_SESSION['permissions'] //get the permissions assigned to the groups that the user is a member of set the permissions in $_SESSION['permissions']
$x = 0; if (count($_SESSION["groups"]) > 0) {
$sql = "select distinct(permission_name) from v_group_permissions "; $x = 0;
foreach($_SESSION["groups"] as $field) { $sql = "select distinct(permission_name) from v_group_permissions ";
if (strlen($field['group_name']) > 0) { foreach($_SESSION["groups"] as $field) {
if ($x == 0) { if (strlen($field['group_name']) > 0) {
$sql .= "where (domain_uuid = '".$domain_uuid."' and group_name = '".$field['group_name']."') "; if ($x == 0) {
$sql .= "where (domain_uuid = '".$domain_uuid."' and group_name = '".$field['group_name']."') ";
}
else {
$sql .= "or (domain_uuid = '".$domain_uuid."' and group_name = '".$field['group_name']."') ";
}
$x++;
} }
else {
$sql .= "or (domain_uuid = '".$domain_uuid."' and group_name = '".$field['group_name']."') ";
}
$x++;
} }
$prep_statement_sub = $db->prepare($sql);
$prep_statement_sub->execute();
$_SESSION['permissions'] = $prep_statement_sub->fetchAll(PDO::FETCH_NAMED);
unset($sql, $prep_statement_sub);
} }
$prep_statement_sub = $db->prepare($sql);
$prep_statement_sub->execute();
$_SESSION['permissions'] = $prep_statement_sub->fetchAll(PDO::FETCH_NAMED);
unset($sql, $prep_statement_sub);
//get the user settings //get the user settings
$sql = "select * from v_user_settings "; $sql = "select * from v_user_settings ";