[Vtigercrm-commits] [vtiger-commits] r5261 - /vtigercrm/trunk/include/utils/UserInfoUtil.php

[vtigercrm-commits at vtiger.fosslabs.com]

Author: don
Date: Mon Apr 24 05:53:38 2006
New Revision: 5261

Log:
Security support for Faq Done

Modified:
    vtigercrm/trunk/include/utils/UserInfoUtil.php

Modified: vtigercrm/trunk/include/utils/UserInfoUtil.php
==============================================================================
--- vtigercrm/trunk/include/utils/UserInfoUtil.php (original)
+++ vtigercrm/trunk/include/utils/UserInfoUtil.php Mon Apr 24 05:53:38 2006
@@ -179,7 +179,7 @@
         }
         else
         {
-                $sql = "select * from profile2tab where profileid=" .$profileid." and tabid not in(15)";
+                $sql = "select * from profile2tab where profileid=" .$profileid;
                 $result = $adb->query($sql);
                 $tab_perr_array = Array();
                 $num_rows = $adb->num_rows($result);
@@ -187,7 +187,7 @@
                 {
                         $tabid= $adb->query_result($result,$i,'tabid');
                         $tab_per= $adb->query_result($result,$i,'permissions');
-                        if($tabid != 3 && $tabid != 16 && $tab_id != 15)
+                        if($tabid != 3 && $tabid != 16)
                         {
                                 $tab_perr_array[$tabid] = $tab_per;
                         }
@@ -211,7 +211,7 @@
 	global $adb;
 	$check = Array();
 	$temp_tabid = Array();	
-	$sql1 = "select * from profile2standardpermissions where profileid=".$profileid." and tabid not in(15,16) order by(tabid)";
+	$sql1 = "select * from profile2standardpermissions where profileid=".$profileid." and tabid not in(16) order by(tabid)";
 	//echo $sql1.'<BR>';
 	$result1 = $adb->query($sql1);
         $num_rows1 = $adb->num_rows($result1);
@@ -1270,6 +1270,7 @@
 		return $permission;
 	}
 	//Checking for Action Permission
+	//echo '******* '.$actionid.'  *********** '.$profileActionPermission[$tabid][$actionid];
 	if($profileActionPermission[$tabid][$actionid] != 0)
 	{
 		$permission = "no";