Till Brehm
2014-01-23 132df2144fab92262dce7b6ad26782f6e62ec857
Prevent that the type of a sys_user that belongs to a client or reseller can be changed to admin.
2 files modified
8 ■■■■■ changed files
interface/web/admin/lib/lang/en_users.lng 1 ●●●● patch | view | raw | blame | history
interface/web/admin/users_edit.php 7 ●●●●● patch | view | raw | blame | history
interface/web/admin/lib/lang/en_users.lng
@@ -30,4 +30,5 @@
$wb['password_mismatch_txt'] = 'The passwords do not match.';
$wb['password_match_txt'] = 'The passwords do match.';
$wb['username_error_collision'] = 'The username may not be web or web plus a number."';
$wb['client_not_admin_err'] = 'A user that belongs to a client can not be set to type: admin';
?>
interface/web/admin/users_edit.php
@@ -66,7 +66,14 @@
        if(@is_array($this->dataRecord['modules']) && !in_array($this->dataRecord['startmodule'], $this->dataRecord['modules'])) {
            $app->tform->errorMessage .= $app->tform->wordbook['startmodule_err'];
        }
        $this->oldDataRecord = $app->tform->getDataRecord($this->id);
        //* A user that belongs to a client record (client or reseller) may not have typ admin
        if(isset($this->dataRecord['typ']) && $this->dataRecord['typ'][0] == 'admin'  && $this->oldDataRecord['client_id'] > 0) {
            $app->tform->errorMessage .= $app->tform->wordbook['client_not_admin_err'];
        }
    }
    /*