Changeset 780

Timestamp:

02/02/10 02:17:42 (14 years ago)

Author:

nanardon

Message:

• fix form view over acl checking

Location:

LATMOS-Accounts-Web

Files:

• lib/LATMOS/Accounts/Web/Model/AttrForms.pm (modified) (1 diff)
• root/html/users/address_list.tt (modified) (2 diffs)

LATMOS-Accounts-Web/lib/LATMOS/Accounts/Web/Model/AttrForms.pm

@@ -206 +206 @@
         ? ($self->{object}, $attr, 'w')
         : ($self->otype, '@CREATE', 'w'));
-    $type ||= $self->base->get_field_name($self->otype, $attr, 'w') && $modallow
-        ? $attrs->{$attr}[1] || ''
-        : 'label';
+    $type ||= $attrs->{$attr}[1] || '';
+    if (!($self->base->get_field_name($self->otype, $attr, 'w') && $modallow)) {
+        $type = 'label';
+    }
     # exception: gidNumber is used also in group, but we don't want
     # group list here, really the number !

LATMOS-Accounts-Web/root/html/users/address_list.tt

@@ -18 +18 @@
 [% END %]
 [% IF NOT c.req.param('add_addr') %]
+[% IF c.model('Accounts').db.check_acl(user, 'l', 'w') &&
+      c.model('Accounts').db.check_acl('address', '@CREATE', 'w') %]
 <tr><td colspan=2 align="center">
 <form action="[% c.uri_for(username, subform) %]" method="POST">
@@ -25 +27 @@
 </td></tr>
 [% END %]
+[% END %]
 </table>
 </form>