Changeset 3426

Timestamp:

06/10/07 18:31:02 (19 months ago)

Author:

inureyes

Message:

#408

• 글편집에 관한 부분을 acl을 사용하도록 수정
  

Location:

trunk

Files:

• blog/owner/entry/delete/index.php (modified) (1 diff)
• blog/owner/entry/edit/item.php (modified) (1 diff)
• blog/owner/entry/visibility/item.php (modified) (1 diff)
• lib/pageACL.php (modified) (1 diff)

trunk/blog/owner/entry/delete/index.php

@@ -13 +13 @@
 foreach(explode(',', $_POST['targets']) as $target) {
     // TeamBlog check
-    if(empty($pc)){
+    if(!Acl::Check('group.blogwriters')){
         $isPosting = DBQuery::queryCell("SELECT team FROM {$database['prefix']}TeamEntryRelations WHERE owner='$owner' and team='".$_SESSION['admin']."' and id='".$suri['id']."'" );
         if(empty($isPosting)) {

trunk/blog/owner/entry/edit/item.php

@@ -30 +30 @@
 }
 
-
-// 팀블로그 :: 현재 포스트를 내가 편집할 수 있는지 권한확인
-if(empty($pc) && !empty($suri['id'])){
-    $isPosting = DBQuery::queryCell("SELECT Team FROM {$database['prefix']}TeamEntryRelations WHERE Owner='$owner' and Team='$_SESSION[admin]' and Id='$suri[id]' " );
+// Check whether or not user has permission to edit.
+if(Acl::Check('group.blogwriters')===false && !empty($suri['id'])){
+    $isPosting = DBQuery::queryCell("SELECT team 
+            FROM {$database['prefix']}TeamEntryRelations 
+            WHERE owner = '".$owner."'
+                and team = '".$_SESSION['admin']."'
+                and id = '".$suri['id']);
     if(empty($isPosting)) { @header("location:".$blogURL ."/owner/entry"); exit; }
 }

trunk/blog/owner/entry/visibility/item.php

@@ -16 +16 @@
 
 // TeamBlog ACL check whether or not current user can edit this post.
-if(empty($pc) && !empty($suri['id'])){
-    $isPosting = DBQuery::queryCell("SELECT team FROM {$database['prefix']}TeamEntryRelations WHERE owner='".$owner."' and team='".$_SESSION['admin']."' and id='".$suri['id']."'" );
+if(Acl::Check('group.blogwriters') === false && !empty($suri['id'])){
+    $isPosting = DBQuery::queryCell("SELECT team 
+            FROM {$database['prefix']}TeamEntryRelations 
+            WHERE owner='".$owner."' 
+                and team='".$_SESSION['admin']."' 
+                and id='".$suri['id']."'" );
     if(empty($isPosting)) {
         exit;

trunk/lib/pageACL.php

@@ -26 +26 @@
         '/edit');
 
-    $pc = teamblogUser::PC();   // Teamblog moderator
-    $ac = teamblogUser::AC();   // Teamblog administrator
+    $pc = Acl::Check('group.blogwriters');  // Teamblog moderator
+    $ac = Acl::Check('group.administrators');   // Teamblog administrator
 
     if(empty($ac) && !eregi('/owner/entry', $suri['directive'])){