Changeset 4979 in subversion

Timestamp:

Jul 27, 2011 1:50:39 PM (22 months ago)

Author:

alec

Message:

• Don't allow setting rights to yourself

File:

• trunk/plugins/acl/acl.php (modified) (1 diff)

trunk/plugins/acl/acl.php

@@ -440 +440 @@
         }
 
-        if ($acl && $user && strlen($mbox)
-            && $this->rc->imap->set_acl($mbox, $user, $acl)
-        ) {
+        if ($acl && $user && $user != $_SESSION['username'] && strlen($mbox)) {
+            $result = $this->rc->imap->set_acl($mbox, $user, $acl);
+        }
+
+        if ($result) {
             $ret = array('id' => html_identifier($user),
                  'username' => $username, 'acl' => implode($acl), 'old' => $oldid);