diff options
Diffstat (limited to 'application/modules/user/controllers/BootisoController.php')
| -rw-r--r-- | application/modules/user/controllers/BootisoController.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/application/modules/user/controllers/BootisoController.php b/application/modules/user/controllers/BootisoController.php index a8c7de7..ae34ca0 100644 --- a/application/modules/user/controllers/BootisoController.php +++ b/application/modules/user/controllers/BootisoController.php @@ -224,7 +224,7 @@ class user_BootisoController extends Zend_Controller_Action public function editbootisoAction() { //ACL Darf er BootISOs editieren? - if(!Pbs_Acl::checkRight('be')) + if(!Pbs_Acl::checkRight('be') && !Pbs_Acl::checkRight('bem')) $this->_redirect('/user/bootiso/index/page/'.$this->page.'/modifyresult/forbidden'); $bootisoID = $this->_request->getParam('bootisoID'); @@ -276,7 +276,7 @@ class user_BootisoController extends Zend_Controller_Action $bootiso->getPublic() != $bootisoold->getPublic() || $bootiso->getSerialnumber() != $bootisoold->getSerialnumber()){ //ACL Is he allowed to edit other than Metadata? - if(Pbs_Acl::checkRight('bem')) + if(!Pbs_Acl::checkRight('be')) $this->_redirect('/user/bootiso/index/page/'.$this->page.'/modifyresult/forbidden'); } |
