[phpBT-dev] CVS: phpbt/admin project.php,1.49,1.50

[Ulf E. <ulf...@us...>]

Update of /cvsroot/phpbt/phpbt/admin
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv32663/admin

Modified Files:
	project.php 
Log Message:
Permission fixes for project admins


Index: project.php
===================================================================
RCS file: /cvsroot/phpbt/phpbt/admin/project.php,v
retrieving revision 1.49
retrieving revision 1.50
diff -u -r1.49 -r1.50
--- project.php	27 Aug 2005 13:14:28 -0000	1.49
+++ project.php	2 Sep 2005 19:17:24 -0000	1.50
@@ -26,7 +26,7 @@
 define('TEMPLATE_PATH', 'admin');
 include 'include.php';
 
-function del_version($versionid, $projectid) {
+function del_version($versionid, $projectid = 0) {
 	global $db, $me, $perm;
 
 	$perm->check_proj($projectid);
@@ -37,7 +37,7 @@
 	header("Location: $me?op=edit&id=$projectid&");
 }
 
-function save_version($version_id = 0) {
+function save_version($version_id = 0, $projectid = 0) {
 	global $db, $me, $now, $u, $t, $perm;
 
 	$perm->check_proj($projectid);
@@ -81,7 +81,7 @@
 		!empty($_REQUEST['use_js']) ? 'wrap-popup.html' : 'wrap.html');
 }
 
-function del_component($componentid, $projectid) {
+function del_component($componentid, $projectid = 0) {
 	global $db, $me, $perm;
 
 	$perm->check_proj($projectid);
@@ -92,7 +92,7 @@
 	header("Location: $me?op=edit&id=$projectid&");
 }
 
-function save_component($component_id = 0) {
+function save_component($component_id = 0, $projectid = 0) {
 	global $db, $me, $u, $now, $t, $perm;
 
 	$perm->check_proj($projectid);
@@ -243,6 +243,8 @@
 function show_project($projectid = 0, $error = null) {
 	global $db, $me, $t, $QUERY, $perm;
 
+	$perm->check_proj($projectid);
+
 	if (is_array($error)) $t->assign($error);
 	else $t->assign('error', $error);
 	$t->assign('project_groups', 
@@ -319,8 +321,8 @@
 		case 'del_component' : del_component($_REQUEST['id'], $_REQUEST['project_id']); break;
 		case 'del_version' : del_version($_REQUEST['id'], $_REQUEST['project_id']); break;
 		case 'save_project' : save_project($_POST['id']); break;
-		case 'save_version' : save_version($_POST['version_id']); break;
-		case 'save_component' : save_component($_POST['component_id']); break;
+		case 'save_version' : save_version($_POST['version_id'], $_POST['project_id']); break;
+		case 'save_component' : save_component($_POST['component_id'], $_POST['project_id']); break;
 	}
 } else list_projects();