X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=html%2Fgetkiosk.php;h=1f8d59923e3fa12c8191bce6fe7947eb2a103d7f;hb=cdf7a53cf05d87eb2a5919361e9c24065a85c62a;hp=bd8d0e8e704fe23020fb127119f17b2337916aa5;hpb=c10d1b618eaf92e4245ae4cf24a50c63ac381926;p=gosa.git

diff --git a/html/getkiosk.php b/html/getkiosk.php
index bd8d0e8e7..1f8d59923 100644
--- a/html/getkiosk.php
+++ b/html/getkiosk.php
@@ -55,17 +55,18 @@ session_start ();
 /* Logged in? Simple security check */
 if (!isset($_SESSION['ui'])){
   gosa_log ("Error: getkiosk.php called without session");
-  header ("Location: ../index.php");
+  header ("Location: index.php");
   exit;
 }
 $ui= $_SESSION["ui"];
 $config= $_SESSION['config'];
 
 /* Check ACL's */
-$acl= get_permissions ($config->current['BASE'], $ui->subtreeACL);
-$acl= get_module_permission($acl, "all", $config->current['BASE']);
-if (chkacl($acl, "all") != ""){
-  header ("Location: ../index.php");
+#FIXME Use more specific acl categories instead of all/all
+$ui = get_userinfo();
+$acl = $ui->get_permissions(base64_decode($_GET['id']),"all/all");
+if(!preg_match("/r/",$acl)){
+  header ("Location: index.php");
   exit;
 }
 $dir = search_config($config->data,"environment", "KIOSKPATH");