X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=html%2Fgetkiosk.php;h=cde88c5a063e006b555318ccace6625a294a5777;hb=e1dbbb4a55cb759059cdd8b0f83a5ca0428b7d2a;hp=d3a25ad3f891a0109b2865dc2caf16a70c44c144;hpb=aa26fd47b6cffd3a40d6cfb8e780d813395600a0;p=gosa.git

diff --git a/html/getkiosk.php b/html/getkiosk.php
index d3a25ad3f..cde88c5a0 100644
--- a/html/getkiosk.php
+++ b/html/getkiosk.php
@@ -54,7 +54,7 @@ session_start ();
 
 /* Logged in? Simple security check */
 if (!isset($_SESSION['ui'])){
-  gosa_log ("Error: getkiosk.php called without session");
+  new log("security","fai","",array(),"Error: getkiosk.php called without session") ;
   header ("Location: index.php");
   exit;
 }
@@ -62,9 +62,10 @@ $ui= $_SESSION["ui"];
 $config= $_SESSION['config'];
 
 /* Check ACL's */
-$acl= get_permissions ($config->current['BASE'], $ui->subtreeACL);
-$acl= get_module_permission($acl, "all", $config->current['BASE']);
-if (chkacl($acl, "all") != ""){
+#FIXME Use more specific acl categories instead of all/all
+$ui = get_userinfo();
+$acl = $ui->get_permissions(base64_decode($_GET['id']),"all/all");
+if(!preg_match("/r/",$acl)){
   header ("Location: index.php");
   exit;
 }