[Tikiwiki-cvs/svn] SF.net SVN: tikiwiki:[24742] trunk/tiki-user_watches.php

[<sy...@us...>]

Revision: 24742
          http://tikiwiki.svn.sourceforge.net/tikiwiki/?rev=24742&view=rev
Author:   sylvieg
Date:     2010-01-29 15:28:15 +0000 (Fri, 29 Jan 2010)

Log Message:
-----------
[MOD]watch: avoid confirmation step if no perms

Modified Paths:
--------------
    trunk/tiki-user_watches.php

Modified: trunk/tiki-user_watches.php
===================================================================
--- trunk/tiki-user_watches.php	2010-01-29 15:07:46 UTC (rev 24741)
+++ trunk/tiki-user_watches.php	2010-01-29 15:28:15 UTC (rev 24742)
@@ -70,13 +70,19 @@
 }
 
 if (isset($_REQUEST['id'])) {
+	if ($tiki_p_admin_notifications != 'y' && $user != $tikilib->get_user_notification($_REQUEST['id'])) {
+		$smarty->assign('errortype', 401);
+		$smarty->assign('msg', tra("Permission denied"));
+		$smarty->display("error.tpl");
+		die;
+	}
 	$area = 'deluserwatch';
 	if ($prefs['feature_ticketlib2'] != 'y' or (isset($_POST['daconfirm']) and isset($_SESSION["ticket_$area"]))) {
 		key_check($area);
 		$error = $tikilib->remove_user_watch_by_id($_REQUEST['id']);
 		$smarty->assign('remove_user_watch_error', !$error);
 	} else {
-		key_get($area);
+		key_get($area, tra('Remove the notification email'));
 	}
 }
 


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.