From ddc8928f60020d8c8ee3445606a8eba0b76fb04b Mon Sep 17 00:00:00 2001
From: hickert <hickert@594d385d-05f5-0310-b6e9-bd551577e9d8>
Date: Thu, 19 Jun 2008 13:26:24 +0000
Subject: [PATCH] Updated ACL check. - Cleanup ACLs only if we reached a new
 department level.

git-svn-id: https://oss.gonicus.de/repositories/gosa/trunk@11382 594d385d-05f5-0310-b6e9-bd551577e9d8
---
 gosa-core/include/class_userinfo.inc | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/gosa-core/include/class_userinfo.inc b/gosa-core/include/class_userinfo.inc
index 957dc78f6..2a459c88a 100644
--- a/gosa-core/include/class_userinfo.inc
+++ b/gosa-core/include/class_userinfo.inc
@@ -314,15 +314,18 @@ class userinfo
     $cpath= "";
     foreach ($path as $element){
 
+      /* Clean potential ACLs for each level */
+      if(in_array($cpath,$this->config->departments)){
+        $acl= $this->cleanACL($acl);
+      }
+
       if ($cpath == ""){
         $cpath= $element;
       } else {
         $cpath= $element.','.$cpath;
       }
-      if (isset($this->ACL[$cpath])){
 
-        /* Clean potential ACLs for each level */
-        $acl= $this->cleanACL($acl);
+      if (isset($this->ACL[$cpath])){
 
         /* Inspect this ACL, place the result into ACL */
         foreach ($this->ACL[$cpath] as $subacl){
-- 
2.30.2