mirror of https://github.com/MISP/MISP
Permission issue with delete servers
- fixed a bug that prevented the deletion of sync linkspull/217/head
parent
4215066a90
commit
fb7f084e70
|
@ -135,7 +135,7 @@ class ServersController extends AppController {
|
||||||
throw new NotFoundException(__('Invalid server'));
|
throw new NotFoundException(__('Invalid server'));
|
||||||
}
|
}
|
||||||
$s = $this->Server->read(null, $id);
|
$s = $this->Server->read(null, $id);
|
||||||
if (!$this->_isSiteAdmin() || !($s['Server']['org'] == $this->Auth->user('org') && $this->_isSiteAdmin())) $this->redirect(array('controller' => 'servers', 'action' => 'index'));
|
if (!$this->_isSiteAdmin() && !($s['Server']['org'] == $this->Auth->user('org') && $this->_isSiteAdmin())) $this->redirect(array('controller' => 'servers', 'action' => 'index'));
|
||||||
if ($this->Server->delete()) {
|
if ($this->Server->delete()) {
|
||||||
$this->Session->setFlash(__('Server deleted'));
|
$this->Session->setFlash(__('Server deleted'));
|
||||||
$this->redirect(array('action' => 'index'));
|
$this->redirect(array('action' => 'index'));
|
||||||
|
|
Loading…
Reference in New Issue