Changeset 182

Timestamp:

12/02/11 17:39:24 (12 years ago)

Author:

Kris Deugau

Message:

/trunk

Scope checks (See #30)

• user delete

File:

• trunk/dns.cgi (modified) (1 diff)

trunk/dns.cgi

@@ -617 +617 @@
   changepage(page => "reclist", errmsg => "You are not permitted to delete records", id => $webvar{parentid})
         unless ($permissions{admin} || $permissions{record_delete});
+
+  if (!check_scope(id => $webvar{id}, type => ($webvar{defrec} eq 'y' ? 'group' : 'domain'))) {
+    changepage(page => 'domlist', errmsg => "You do not have permission to delete records in the requested ".
+        ($webvar{defrec} eq 'y' ? 'group' : 'domain'));
+  }
 
   $page->param(id => $webvar{id});