Alexander Nicolaysen Sørnes : objectManager: Only show the edit screen if the user has sufficient rights

[Alexander Nicolaysen Sørnes]

Module: appdb
Branch: master
Commit: 1dfb1a24c607620339bf0587f65234aa6766858a
URL:    http://source.winehq.org/git/appdb.git/?a=commit;h=1dfb1a24c607620339bf0587f...

Author: Alexander Nicolaysen Sørnes 
Date:   Wed Jul 22 20:29:48 2009 +0200

objectManager: Only show the edit screen if the user has sufficient rights

---

include/objectManager.php |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/include/objectManager.php b/include/objectManager.php
index 0e1f0df..4235279 100644
--- a/include/objectManager.php
+++ b/include/objectManager.php
@@ -393,6 +393,10 @@ class ObjectManager
             return;
         }

+        /* Only show the edit screen if the user has sufficient rights */
+        if(!$oObject->canEdit())
+            $this->error_exit('You do not have sufficient privileges to edit this entry');
+
         /* Display errors, if any, and fetch form data */
         if($this->displayErrors($sErrors))
         {