Changeset 919

Timestamp:

04/02/12 12:09:53 (12 years ago)

Author:

nanardon

Message:

• check acls only over main base, not all, avoid useless check over base not supporting complex acls like kerberos

File:

• LATMOS-Accounts-Web/lib/LATMOS/Accounts/Web/Controller/Users.pm (modified) (2 diffs)

LATMOS-Accounts-Web/lib/LATMOS/Accounts/Web/Controller/Users.pm

@@ -69 +69 @@
     if ($msg ne 'ok') {
         return $msg . ', mot de passe inchangé';
-    } elsif ($suser && $suser->set_password($password)) {
+    } elsif ($suser && $suser->_set_password($password)) {
         $sync->commit;
         return;
@@ -96 +96 @@
             $c->stash->{template} = 'users/passwd.tt';
             if ($c->req->param('passwd')) {
-                if ($c->req->param('passwd') eq ($c->req->param('cpasswd') || '')) {
-                    $c->stash->{pmerror} = $c->forward('change_password',
-                        [ $username, $c->req->param('passwd') ] ) || 'Mot de passe changé';
-                } else {
-                    $c->stash->{pmerror} = 'Mot de passe différents';
+                if ($base->check_acl($c->stash->{user}, 'userPassword', 'w')) {
+                    if ($c->req->param('passwd') eq ($c->req->param('cpasswd') || '')) {
+                        $c->stash->{pmerror} = $c->forward('change_password',
+                            [ $username, $c->req->param('passwd') ] ) || 'Mot de passe changé';
+                    } else {
+                        $c->stash->{pmerror} = 'Mot de passe différents';
+                    }
                 }
             }