Changeset 145

Timestamp:

10/20/11 16:02:30 (13 years ago)

Author:

Kris Deugau

Message:

/trunk

Completed ACL checks on deleting a user
Present a "success" message on deleting a user rather than just
silently dropping you back to the useradmin page

File:

• trunk/dns.cgi (modified) (2 diffs)

trunk/dns.cgi

@@ -1011 +1011 @@
 } elsif ($webvar{page} eq 'deluser') {
 
+  changepage(page=> "useradmin", errmsg => "You are not allowed to delete users")
+        unless $permissions{admin} || $permissions{user_delete};
+
   $page->param(id => $webvar{id});
   # first pass = confirm y/n (sorta)
@@ -1032 +1035 @@
       logaction(0, $session->param("username"), $curgroup, "Deleted user $webvar{id}/".$userref->{username}.
         " (".$userref->{lastname}.", ".$userref->{firstname}.")");
-      changepage(page => "useradmin");
+      changepage(page => "useradmin", resultmsg => "Deleted user ".$userref->{username}.
+        " (".$userref->{lastname}.", ".$userref->{firstname}.")");
     }
   } else {