mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix users being able to view ports they are allowed to view, when not allowed to view the device

Browse Source 
git-svn-id: http://www.observium.org/svn/observer/trunk@2145 61d68cd4-352d-0410-923a-c4978735b2b8
This commit is contained in:
Adam Amstrong
2011-04-23 10:47:40 +00:00
parent bf694bdb09
commit 1fcb7b6cb8
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
html/pages/device.inc.php
View File

@@ -2,7 +2,7 @@
if ($_GET['id']) { $_GET['id'] = mres($_GET['id']); } if ($_GET['id']) { $_GET['id'] = mres($_GET['id']); }
if ($_GET['section'] == "interface" && is_numeric($_GET['opta']) && port_permitted($_GET['opta'])) if ($_GET['section'] == "port" && is_numeric($_GET['opta']) && port_permitted($_GET['opta']))
{ {
$check_device = get_device_id_by_interface_id($_GET['opta']); $check_device = get_device_id_by_interface_id($_GET['opta']);
$permit_ports = 1; $permit_ports = 1;
@@ -264,18 +264,18 @@ if (device_permitted($_GET['id']) || $check_device == $_GET['id'])
</a> </a>
</li>'); </li>');
} }
echo("</ul>"); echo("</ul>");
}
if(device_permitted($device['device_id']) || $check_device == $_GET['id']) {
echo('<div class="contentstyle">'); echo('<div class="contentstyle">');
include("pages/device/".mres(basename($section)).".inc.php"); include("pages/device/".mres(basename($section)).".inc.php");
echo("</div>"); echo("</div>");
} else {
include("includes/error-no-perm.inc.php");
} }
} }
else
{
include("includes/error-no-perm.inc.php");
}
?> ?>