Aplied patch:

Von:
gosa-svn@oss.gonicus.de
  An:
gosa-svn@oss.gonicus.de
  Datum:
02.03.2009 10:58

Author: lhm-gosa
Date: 2009-03-02 10:58:57 +0100 (Mon, 02 Mar 2009)
New Revision: 13481

Modified:
   branches/2.6-lhm/trunk/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc
Log:
Fix object group deletion ACLs

git-svn-id: https://oss.gonicus.de/repositories/gosa/trunk@13520 594d385d-05f5-0310-b6e9-bd551577e9d8

diff --git a/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc b/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc
index 1ce25e12db65a58967c347c0fe865133df59815f..ece1e48ece05d3095c452e6401fbe7cb417d5991 100644 (file)
--- a/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc
+++ b/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc
@@ -225,7 +225,7 @@ class ogroupManagement extends plugin
         $disallowed = array();
         foreach($ids as $id){
           $dn = $this->ogrouplist[$id]['dn'];
-          $acl = $this->ui->get_permissions($dn, "users/user");
+          $acl = $this->ui->get_permissions($dn, "ogroups/ogroup");
           if(preg_match("/d/",$acl)){
             $this->dns[$id] = $dn;
           }else{
@@ -270,7 +270,7 @@ class ogroupManagement extends plugin
       /* Remove user by user and check acls before removeing them */
       foreach($this->dns as $key => $dn){
 
-        $acl = $this->ui->get_permissions($dn, "ogroups");
+        $acl = $this->ui->get_permissions($dn, "ogroups/ogroup");
         if (preg_match('/d/', $acl)){
 
           /* Delete request is permitted, perform LDAP action */
@@ -317,7 +317,7 @@ class ogroupManagement extends plugin
 
       /* Load permissions for selected 'dn' and check if
          we're allowed to remove this 'dn' */
-      $acl = $this->ui->get_permissions($this->dn,"ogroups");
+      $acl = $this->ui->get_permissions($this->dn,"ogroups/ogroup");
       if(preg_match("/d/",$acl)){
 
         /* Check locking, save current plugin in 'back_plugin', so
@@ -349,7 +349,7 @@ class ogroupManagement extends plugin
 
       /* Some nice guy may send this as POST, so we've to check
          for the permissions again. */
-      $acl = $this->ui->get_permissions($this->dn,"ogroups");
+      $acl = $this->ui->get_permissions($this->dn,"ogroups/ogroup");
       if(preg_match("/d/",$acl)){
 
         /* Delete request is permitted, perform LDAP action */