diff options
author | Simon Rettberg | 2018-02-13 16:30:49 +0100 |
---|---|---|
committer | Simon Rettberg | 2018-02-13 16:30:49 +0100 |
commit | 2a8858e17ef441a22526e8aedf5262e7e065d8d6 (patch) | |
tree | b17041cdecfe91b120094eae0450085ef8c1d5d2 /modules-available/syslog/page.inc.php | |
parent | [permissionmanager] Slightly more efficient queries, wildcard support, debug ... (diff) | |
download | slx-admin-2a8858e17ef441a22526e8aedf5262e7e065d8d6.tar.gz slx-admin-2a8858e17ef441a22526e8aedf5262e7e065d8d6.tar.xz slx-admin-2a8858e17ef441a22526e8aedf5262e7e065d8d6.zip |
[syslog] Permission checks when saving anonymization days
Diffstat (limited to 'modules-available/syslog/page.inc.php')
-rw-r--r-- | modules-available/syslog/page.inc.php | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/modules-available/syslog/page.inc.php b/modules-available/syslog/page.inc.php index a26ed9be..3a7513b5 100644 --- a/modules-available/syslog/page.inc.php +++ b/modules-available/syslog/page.inc.php @@ -14,7 +14,9 @@ class Page_SysLog extends Page Message::addError('main.no-permission'); Util::redirect('?do=Main'); } + if (($days = Request::post('anondays', false, 'int')) !== false) { + User::assertPermission('configure-anonymization', NULL,'?do=syslog'); if ($days < 0 || $days > 180) { Message::addError('anon-days-out-of-range', $days); } else { @@ -27,7 +29,9 @@ class Page_SysLog extends Page protected function doRender() { - Render::addTemplate("heading"); + $data = ['anondays' => Property::get(self::PROP_ANON_DAYS, 0)]; + Permission::addGlobalTags($data['perms'], NULL, ['configure-anonymization']); + Render::addTemplate("heading", $data); if (!User::hasPermission("view")) { Message::addError('main.no-permission'); @@ -104,7 +108,6 @@ class Page_SysLog extends Page 'list' => $lines, 'types' => json_encode(array_values($types)), 'machineuuid' => Request::get('machineuuid'), - 'anondays' => Property::get(self::PROP_ANON_DAYS, 0), )); } |