Looks like the File Management plugin is missing a permission check there ...
In the plugin's functionc.inc file, find this:
Text Formatted Code
function plugin_cclabel_filemgmt()
{
global $LANG_FILEMGMT, $_CONF;
return array($LANG_FILEMGMT['plugin_name'],$_CONF['site_admin_url'] . '/plugins/filemgmt/index.php',$_CONF['site_url'] . '/filemgmt/images/filemgmt.gif');
}
and add the permission check (which you can copy from the function plugin_getuseroption_filemgmt just below that function):
Text Formatted Code
function plugin_cclabel_filemgmt()
{
global $LANG_FILEMGMT, $_CONF;
if (SEC_hasRights('filemgmt.upload')) {
return array($LANG_FILEMGMT['plugin_name'],$_CONF['site_admin_url'] . '/plugins/filemgmt/index.php',$_CONF['site_url'] . '/filemgmt/images/filemgmt.gif');
}
}
That should fix it.
bye, Dirk