Web   ·   Wiki   ·   Activities   ·   Blog   ·   Lists   ·   Chat   ·   Meeting   ·   Bugs   ·   Git   ·   Translate   ·   Archive   ·   People   ·   Donate
summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAleksey Lim <alsroot@member.fsf.org>2009-06-29 00:54:40 (GMT)
committer Aleksey Lim <alsroot@member.fsf.org>2009-06-29 00:54:40 (GMT)
commit6e1b7373d9efdc96fb0cab332d358474e3c47a9f (patch)
tree7eaab0b03dcc7b9eb57eaad6176bcfa9fe429dc0
parentd18a7cf5e09f01239e92d79173fb713de099edda (diff)
Show suggested addons in popup list for addon entry box #956
-rw-r--r--site/app/controllers/admin_controller.php8
1 files changed, 6 insertions, 2 deletions
diff --git a/site/app/controllers/admin_controller.php b/site/app/controllers/admin_controller.php
index b666538..0cbee57 100644
--- a/site/app/controllers/admin_controller.php
+++ b/site/app/controllers/admin_controller.php
@@ -600,6 +600,11 @@ class AdminController extends AppController
}
function _collectionsPromoBoxStructure($action = '', $id = 0) {
+ //Part of the Lists permission
+ if (!$this->SimpleAcl->actionAllowed('Editors', '*', $this->Session->read('User'))) {
+ $this->Amo->accessDenied();
+ }
+
$this->breadcrumbs['Collections Features'] = '/admin/collections/promoboxstructure';
$this->set('breadcrumbs', $this->breadcrumbs);
@@ -1996,8 +2001,7 @@ class AdminController extends AppController
* AJAX Add-on lookup
*/
function addonLookup() {
- if (!$this->SimpleAcl->actionAllowed('Admin', '%', $this->Session->read('User')) ||
- !$this->SimpleAcl->actionAllowed('Editor', '*', $this->Session->read('User')) ) {
+ if (!$this->SimpleAcl->actionAllowed('Editors', '*', $this->Session->read('User')) ) {
$this->Amo->accessDenied();
}