gunnar: server/kolab-webadmin/kolab-webadmin/www/admin/domainmaintainer domainmaintainer.php.in, 1.13, 1.14

[cvs at kolab.org]

Author: gunnar

Update of /kolabrepository/server/kolab-webadmin/kolab-webadmin/www/admin/domainmaintainer
In directory doto:/tmp/cvs-serv24145/kolab-webadmin/kolab-webadmin/www/admin/domainmaintainer

Modified Files:
	domainmaintainer.php.in 
Log Message:
 kolab/issue1246 (Permission handling in the webadmin frontend)
https://intevation.de/roundup/kolab/issue1246

Index: domainmaintainer.php.in
===================================================================
RCS file: /kolabrepository/server/kolab-webadmin/kolab-webadmin/www/admin/domainmaintainer/domainmaintainer.php.in,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -d -r1.13 -r1.14
--- domainmaintainer.php.in	12 Jul 2007 14:19:32 -0000	1.13
+++ domainmaintainer.php.in	7 Aug 2007 11:56:56 -0000	1.14
@@ -236,11 +236,13 @@
 			   array_push($errors, sprintf(_("LDAP Error: could not modify object %s: %s"), $dn,
 										   ldap_error($ldap->connection)));
 			 }
-			 if( !$errors ) {
-			   $domains = $ldap->domainsForMaintainerDn($dn);
-			   $remove_domains = array_diff($domains,$_POST['domains']);			   
-			   $ldap->removeFromDomainGroups( $dn, $remove_domains );
+			 if( $auth->group() == 'admin' || $auth->group() == 'maintainer' ) {
+			   if( !$errors ) {
+				 $domains = $ldap->domainsForMaintainerDn($dn);
+				 $remove_domains = array_diff($domains,$_POST['domains']);			   
+				 $ldap->removeFromDomainGroups( $dn, $remove_domains );
 			   $ldap->addToDomainGroups( $newdn, $_POST['domains'] );
+			   }
 			 }
 		   }
 		 }