From: <de...@de...> - 2011-09-21 00:31:20
|
Author: PeterThoeny Date: 2011-09-20 19:31:13 -0500 (Tue, 20 Sep 2011) New Revision: 22329 Trac url: http://develop.twiki.org/trac/changeset/22329 Modified: twiki/branches/TWikiRelease05x01/core/lib/TWiki/UI/Manage.pm Log: Item6811: Fix to check permissions in save access control settings (manage script) Modified: twiki/branches/TWikiRelease05x01/core/lib/TWiki/UI/Manage.pm =================================================================== --- twiki/branches/TWikiRelease05x01/core/lib/TWiki/UI/Manage.pm 2011-09-21 00:30:36 UTC (rev 22328) +++ twiki/branches/TWikiRelease05x01/core/lib/TWiki/UI/Manage.pm 2011-09-21 00:31:13 UTC (rev 22329) @@ -1490,6 +1490,8 @@ my $settings = $query->param( 'text' ); my $originalrev = $query->param( 'originalrev' ); + TWiki::UI::checkAccess( $session, $wev, $topic, 'CHANGE', $session->{user} ); + $newMeta->remove( 'PREFERENCE' ); # delete previous settings # Note: $TWiki::regex{setVarRegex} cannot be used as it requires use in code # that parses multiline settings line by line. |