From daeda679cdab5a18d0d57ff177f1152ceaad706e Mon Sep 17 00:00:00 2001
From: mcramer <m.cramer@pixcept.de>
Date: Tue, 06 Aug 2013 14:24:47 -0400
Subject: [PATCH] - Fixed: Needed permission check of parent domain (folder)

---
 interface/web/vm/openvz_template_edit.php |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/interface/web/vm/openvz_template_edit.php b/interface/web/vm/openvz_template_edit.php
index 2c1247a..c074002 100644
--- a/interface/web/vm/openvz_template_edit.php
+++ b/interface/web/vm/openvz_template_edit.php
@@ -43,6 +43,7 @@
 
 //* Check permissions for module
 $app->auth->check_module_permissions('vm');
+if($_SESSION["s"]["user"]["typ"] != 'admin') die('permission denied');
 
 // Loading classes
 $app->uses('tpl,tform');

--
Gitblit v1.9.1