From 21073c809ab91d7799d080a4c3a6813814ebe701 Mon Sep 17 00:00:00 2001 From: Franck Villaume Date: Sun, 10 Feb 2013 10:52:47 +0100 Subject: [PATCH] docman: fix session permission check --- src/www/docman/index.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/www/docman/index.php b/src/www/docman/index.php index c866171ec5..f671a63d1e 100644 --- a/src/www/docman/index.php +++ b/src/www/docman/index.php @@ -6,7 +6,7 @@ * Copyright 2002-2003, Tim Perdue/GForge, LLC * Copyright 2010-2011, Franck Villaume - Capgemini * Copyright (C) 2010-2011 Alain Peyrat - Alcatel-Lucent - * Copyright 2012, Franck Villaume - TrivialDev + * Copyright 2012-2013, Franck Villaume - TrivialDev * http://fusionforge.org * * This file is part of FusionForge. FusionForge is free software; @@ -43,8 +43,6 @@ require_once $gfwww.'include/html.php'; if (!forge_get_config('use_docman')) exit_disabled('home'); -session_require_perm('docman', $group_id, 'read'); - /* get informations from request or $_POST */ $group_id = getIntFromRequest('group_id'); @@ -56,6 +54,8 @@ $g = group_get_object($group_id); if (!$g || !is_object($g)) exit_no_group(); +session_require_perm('docman', $group_id, 'read'); + /* is this group using docman ? */ if (!$g->usesDocman()) exit_disabled(); -- 2.30.2