Fix: Si on a droit de modifier mot de passe on ne doit pas pour autant avoir droit de modifier autre info
This commit is contained in:
parent
a386799a43
commit
7174e0a5f1
@ -257,11 +257,7 @@ if ($_POST["action"] == 'update' && $caneditfield)
|
||||
|
||||
// Action modif mot de passe
|
||||
if ((($_POST["action"] == 'confirm_password' && $_POST["confirm"] == 'yes')
|
||||
<<<<<<< fiche.php
|
||||
|| $_GET["action"] == 'confirm_passwordsend') && $caneditpassword)
|
||||
=======
|
||||
|| $_GET["action"] == 'confirm_passwordsend') && ($caneditperms || $caneditpassword))
|
||||
>>>>>>> 1.91
|
||||
{
|
||||
$edituser = new User($db, $_GET["id"]);
|
||||
$edituser->fetch();
|
||||
|
||||
Loading…
Reference in New Issue
Block a user