From 7f2df6503e426f5d07a2798eb84a3d3095a7c8d2 Mon Sep 17 00:00:00 2001 From: iglocska Date: Fri, 6 Jun 2014 10:45:53 +0200 Subject: [PATCH] Fix to an incorrect check for privileges in the event deletion --- app/Controller/EventsController.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/Controller/EventsController.php b/app/Controller/EventsController.php index 01bd1b2a6..9efeea85a 100755 --- a/app/Controller/EventsController.php +++ b/app/Controller/EventsController.php @@ -930,7 +930,7 @@ class EventsController extends AppController { } if (!$this->_isSiteAdmin()) { $this->Event->read(); - if (!$this->Event->data['Event']['orgc'] == $this->_checkOrg()) { + if ($this->Event->data['Event']['orgc'] != $this->_checkOrg()) { throw new MethodNotAllowedException(); } }