diff --git a/htdocs/user/group/perms.php b/htdocs/user/group/perms.php index c37e90be53f..2cacc0c9c3b 100644 --- a/htdocs/user/group/perms.php +++ b/htdocs/user/group/perms.php @@ -34,9 +34,14 @@ $langs->load("users"); $module=isset($_GET["module"])?$_GET["module"]:$_POST["module"]; -// Defini si peux modifier utilisateurs et permisssions -$caneditperms=($user->admin || $user->rights->user->user->creer); -$caneditselfperms=($user->admin || $user->rights->user->self->perms); +// Defini si peux lire les permissions +$canreadperms=($user->admin || ($user->rights->user->group->read && $user->rights->user->group->readperms)); + +if (! $canreadperms) accessforbidden(); + +// Defini si peux modifier les permissions +$caneditperms=($user->admin || $user->rights->user->group->write); + /** * Actions diff --git a/htdocs/user/perms.php b/htdocs/user/perms.php index 99777f1779d..f177e91ff71 100644 --- a/htdocs/user/perms.php +++ b/htdocs/user/perms.php @@ -3,7 +3,7 @@ * Copyright (C) 2002-2003 Jean-Louis Bergamo * Copyright (C) 2004-2010 Laurent Destailleur * Copyright (C) 2004 Eric Seigne - * Copyright (C) 2005-2009 Regis Houssin + * Copyright (C) 2005-2010 Regis Houssin * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by