X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=wwwroot%2Fbackend%2Fmysql%2Fpermissions.inc;h=14bc7d42b245d9e36d5194abfb51ee673c0ba57c;hb=4d69b7e3827e4964b3b31e1acac0c79e2dc49449;hp=fded0a937a5b24e6ffef3c7ad8fcc792ac0af127;hpb=6f70ee2c3f1a87a397b946981de35d430f89f30c;p=mirrors%2FKyberia-bloodline.git diff --git a/wwwroot/backend/mysql/permissions.inc b/wwwroot/backend/mysql/permissions.inc index fded0a9..14bc7d4 100644 --- a/wwwroot/backend/mysql/permissions.inc +++ b/wwwroot/backend/mysql/permissions.inc @@ -4,7 +4,7 @@ class permissions { //trillion lights to Hierarchy! //$node input parameter can be a numeric node_id of a node-to-be-checked or a hash containing node_id,node_vector -function checkPerms($node) { +public static function checkPerms($node) { // new permissions checking global $db; @@ -16,14 +16,15 @@ function checkPerms($node) { elseif (is_numeric($node)) { $node_id=$node; } + - if (!$node_vector) { + if (empty($node_vector)) { $set=$db->query("select node_vector from nodes where node_id='$node_id'"); $set->next(); $node_vector=$set->getString('node_vector'); } - - $user_id = $_SESSION['user_id']; + + $user_id=(empty($_SESSION['user_id'])) ? "" : $_SESSION['user_id']; $perms['r'] = 0; $perms['w'] = 0; @@ -79,7 +80,7 @@ function checkPerms($node) { } if ($perms['node_system_access'] != 'private' - && !$_SESSION['user_id'] + && (empty($_SESSION['user_id'])) && $perms['node_external_access'] == 'yes') { $perms['r'] = 1; $perms['w'] = 0; @@ -126,7 +127,7 @@ function checkPerms($node) { break; } - if ($qr_np->getInt('node_creator') == $user_id) { + if ($qr_np->getString('node_creator') == $user_id) { $perms['node_permission'] = 'owner'; $perms['r'] = 1; $perms['w'] = 1; @@ -139,4 +140,4 @@ function checkPerms($node) { } -?> \ No newline at end of file +?>