Status: Banned

gtgillis

Forum User
Full Member
Registered: 11/05/03
Posts: 121
I have a registered user that I gave Story Admin rights. When this user logs in he can see the admin menu containing links for Submissions and Stories. When he clicks on Submissions he sees the Stories and Logout icons and links but also present is the icon and link for File Management.

If he clicks on the link he sees an error that he has no access. I have not granted him filemgmt Admin rights.

How can I get rid of the link and icon when he clicks Submissions?

Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Looks like the File Management plugin is missing a permission check there ...

In the plugin's functionc.inc file, find this:
Text Formatted Code
function plugin_cclabel_filemgmt()
{
    global $LANG_FILEMGMT, $_CONF;
   
    return array($LANG_FILEMGMT['plugin_name'],$_CONF['site_admin_url'] . '/plugins/filemgmt/index.php',$_CONF['site_url'] . '/filemgmt/images/filemgmt.gif');    
}
 

and add the permission check (which you can copy from the function plugin_getuseroption_filemgmt just below that function):
Text Formatted Code
function plugin_cclabel_filemgmt()
{
    global $LANG_FILEMGMT, $_CONF;

    if (SEC_hasRights('filemgmt.upload')) {
        return array($LANG_FILEMGMT['plugin_name'],$_CONF['site_admin_url'] . '/plugins/filemgmt/index.php',$_CONF['site_url'] . '/filemgmt/images/filemgmt.gif');
    }
}
 

That should fix it.

bye, Dirk

Status: Banned

gtgillis

Forum User
Full Member
Registered: 11/05/03
Posts: 121
Thanks.

I had to change it to filemgmt.edit since all logged in users can upload.

Here is the code that worked
Text Formatted Code

function plugin_cclabel_filemgmt()
{
    global $LANG_FILEMGMT, $_CONF;

    if (SEC_hasRights('filemgmt.edit')) {
        return array($LANG_FILEMGMT['plugin_name'],$_CONF['site_admin_url'] . '/plugins/filemgmt/index.php',$_CONF['site_url'] . '/filemgmt/images/filemgmt.gif');
    }
}

 


Thanks for the help.

Regards,
Greg