From 0f1bd1f25da93429c32a69f689771546e8cc65d1 Mon Sep 17 00:00:00 2001
From: Adam Amstrong <adama@localhost>
Date: Wed, 17 Mar 2010 15:15:36 +0000
Subject: [PATCH] hide some sensitive stuff for users < level 7

git-svn-id: http://www.observium.org/svn/observer/trunk@1031 61d68cd4-352d-0410-923a-c4978735b2b8
---
 html/pages/device.php          | 4 ++--
 html/pages/device/edit.inc.php | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/html/pages/device.php b/html/pages/device.php
index 2db2c1edf5..0d32ee9b76 100644
--- a/html/pages/device.php
+++ b/html/pages/device.php
@@ -183,7 +183,7 @@ echo('<li class="' . $select['syslog'] . '">
 
 
 
-if($_SESSION['userlevel'] >= "5") {
+if($_SESSION['userlevel'] >= "7") {
   if(!is_array($config['rancid_configs'])) { $config['rancid_configs'] = array($config['rancid_configs']); }
   foreach($config['rancid_configs'] as $configs) {
     if ($configs[strlen($configs)-1] != '/') { $configs .= '/'; }
@@ -199,7 +199,7 @@ if($device_config_file) {
 ');
 }
 
-if($_SESSION['userlevel'] >= "5") {
+if($_SESSION['userlevel'] >= "7") {
   echo('<li class="' . $select['edit'] . '">
   <a href="'.$config['base_url']."/device/" . $device['device_id'] . '/edit/">
     <img src="images/16/server_edit.png" align="absmiddle" border="0" /> Settings
diff --git a/html/pages/device/edit.inc.php b/html/pages/device/edit.inc.php
index f23108274b..306cf580a9 100644
--- a/html/pages/device/edit.inc.php
+++ b/html/pages/device/edit.inc.php
@@ -1,11 +1,11 @@
 <?php
 
-if($_SESSION['userlevel'] < '5') { 
+if($_SESSION['userlevel'] < '7') { 
   print_error("Insufficient Privileges");
 } else {
 
 if($_POST['editing']) {
-  if($_SESSION['userlevel'] > "5") {
+  if($_SESSION['userlevel'] > "7") {
     include("includes/device-edit.inc.php");
   }
 }