SECISSUE fix #953 모듈 관리자가 허용되지 않은 페이지에 접근할 수 있는 문제 고침

This commit is contained in:
bnu 2014-09-03 16:40:36 +09:00
parent 887df6bc93
commit c7052f5769
2 changed files with 15 additions and 2 deletions

View file

@ -2010,7 +2010,7 @@ class moduleModel extends module
$args->module_srl = $module_srl;
$args->member_srl = $member_info->member_srl;
$output = executeQuery('module.getModuleAdmin',$args);
if($output->data && $output->data->member_srl == $member_info->member_srl) $grant->manager = $grant->is_admin = true;
if($output->data && $output->data->member_srl == $member_info->member_srl) $grant->manager = true;
}
// If not an administrator, get information from the DB and grant manager privilege.
if(!$grant->manager)