From: lhm-gosa <lhm-gosa@594d385d-05f5-0310-b6e9-bd551577e9d8>
Date: Mon, 2 Mar 2009 09:58:57 +0000 (+0000)
Subject: Fix object group deletion ACLs
X-Git-Url: https://git.tokkee.org/?a=commitdiff_plain;h=3fef084d4e01228b75a548285ee5a8ac2537192c;p=gosa.git

Fix object group deletion ACLs


git-svn-id: https://oss.gonicus.de/repositories/gosa/branches/2.6-lhm@13481 594d385d-05f5-0310-b6e9-bd551577e9d8
---

diff --git a/trunk/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc b/trunk/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc
index 1ce25e12d..ece1e48ec 100644
--- a/trunk/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc
+++ b/trunk/gosa-core/plugins/admin/ogroups/class_ogroupManagement.inc
@@ -225,7 +225,7 @@ class ogroupManagement extends plugin
         $disallowed = array();
         foreach($ids as $id){
           $dn = $this->ogrouplist[$id]['dn'];
-          $acl = $this->ui->get_permissions($dn, "users/user");
+          $acl = $this->ui->get_permissions($dn, "ogroups/ogroup");
           if(preg_match("/d/",$acl)){
             $this->dns[$id] = $dn;
           }else{
@@ -270,7 +270,7 @@ class ogroupManagement extends plugin
       /* Remove user by user and check acls before removeing them */
       foreach($this->dns as $key => $dn){
 
-        $acl = $this->ui->get_permissions($dn, "ogroups");
+        $acl = $this->ui->get_permissions($dn, "ogroups/ogroup");
         if (preg_match('/d/', $acl)){
 
           /* Delete request is permitted, perform LDAP action */
@@ -317,7 +317,7 @@ class ogroupManagement extends plugin
 
       /* Load permissions for selected 'dn' and check if
          we're allowed to remove this 'dn' */
-      $acl = $this->ui->get_permissions($this->dn,"ogroups");
+      $acl = $this->ui->get_permissions($this->dn,"ogroups/ogroup");
       if(preg_match("/d/",$acl)){
 
         /* Check locking, save current plugin in 'back_plugin', so
@@ -349,7 +349,7 @@ class ogroupManagement extends plugin
 
       /* Some nice guy may send this as POST, so we've to check
          for the permissions again. */
-      $acl = $this->ui->get_permissions($this->dn,"ogroups");
+      $acl = $this->ui->get_permissions($this->dn,"ogroups/ogroup");
       if(preg_match("/d/",$acl)){
 
         /* Delete request is permitted, perform LDAP action */