Permission check broken for users on layouts (campaigns)
Bug #1035841 reported by
Dan Garner
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Xibo |
Fix Released
|
High
|
Dan Garner |
Bug Description
I created 2 uesr's belonging to the same group. A layout created by user 1 cannot be seen by user 2. I have played around with a lot of settings but only super admin and user 1 is able to view the layout, not user 2.
Related branches
lp:~dangarner/xibo/server-140rc1
- Xibo Maintainters: Pending requested
-
Diff: 1682 lines (+784/-688)6 files modifiedserver/install/database/46.php (+31/-28)
server/lib/data/layout.data.class.php (+17/-1)
server/lib/pages/content.class.php (+33/-24)
server/lib/pages/display.class.php (+693/-625)
server/modules/module_user_general.php (+9/-9)
server/services.php (+1/-1)
- Xibo Maintainters: Pending requested
-
Diff: 1682 lines (+784/-688)6 files modifiedserver/install/database/46.php (+31/-28)
server/lib/data/layout.data.class.php (+17/-1)
server/lib/pages/content.class.php (+33/-24)
server/lib/pages/display.class.php (+693/-625)
server/modules/module_user_general.php (+9/-9)
server/services.php (+1/-1)
Changed in xibo: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
modules/ module_ user_general. php
Line 1273, change to:
$SQL = sprintf($SQL, $campaignId, implode(',', $this-> GetUserGroups( $this-> userid, true)));