From 0a408c8e7619bf8673c7b0f757645815fafdc9a0 Mon Sep 17 00:00:00 2001 From: devjin Date: Tue, 21 Feb 2012 09:52:35 +0000 Subject: [PATCH] issue 1369 fixed git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10165 201d5d3c-b55e-5fd7-737f-ddc643e51545 --- modules/page/page.admin.controller.php | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/modules/page/page.admin.controller.php b/modules/page/page.admin.controller.php index 01d3ecff2..071c0041d 100644 --- a/modules/page/page.admin.controller.php +++ b/modules/page/page.admin.controller.php @@ -244,9 +244,17 @@ $oWidgetController->recompileWidget($content); } - function procPageAdminArticleDocumentInsert(){ + function procPageAdminArticleDocumentInsert() + { $logged_info = Context::get('logged_info'); - if ($logged_info->is_admin != 'Y')return new Object(-1, 'msg_not_permitted'); + + $oModuleModel = &getModel('module'); + $grant = $oModuleModel->getGrant($this->module_info, $logged_info); + + if (!$grant->manager) + { + return new Object(-1, 'msg_not_permitted'); + } $obj = Context::getRequestVars(); $obj->module_srl = $this->module_info->module_srl;