Nemcio/Grav-Admin-Plugin
1
0
Fork 0
mirror of https://github.com/getgrav/grav-plugin-admin.git synced 2025-11-01 02:46:04 +01:00
Code Issues Packages Projects Releases Activity

Fix #943 allow non admin.super users to change their account information. Allow admin.super and admin.users to change other users information.

Browse Source
This commit is contained in:
Flavio Copes
2017-01-28 16:48:11 +01:00
parent 2c58db3418
commit 4faf0c0b95
3 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
classes/admincontroller.php
View File

@@ -438,6 +438,18 @@ class AdminController extends AdminBaseController
$config = $this->grav['config'];
// Special handler for user data.
if ($this->view == 'user') {
if (!$this->admin->authorize(['admin.super', 'admin.users'])) {
//not admin.super or admin.users
if ($this->prepareData($data)->username !== $this->grav['user']->username) {
$this->admin->setMessage($this->admin->translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK') . ' save.',
'error');
return false;
}
}
}
// Special handler for pages data.
if ($this->view == 'pages') {
/** @var Pages $pages */
@@ -512,7 +524,6 @@ class AdminController extends AdminBaseController
}
}
} else {
// Handle standard data types.
$obj = $this->prepareData($data);