EventView.php
authorAlan Knowles <alan@akbkhome.com>
Thu, 1 Dec 2011 03:40:53 +0000 (11:40 +0800)
committerAlan Knowles <alan@akbkhome.com>
Thu, 1 Dec 2011 03:40:53 +0000 (11:40 +0800)
EventView.php

index 91880ed..d3898d0 100644 (file)
@@ -24,6 +24,17 @@ class Pman_Admin_EventView extends Pman
         $ev->get($id);
         
         // verify if not admin, then they should 
+        $g = DB_DataObject::Factory('Group_Members');
+        $grps = $g->listGroupMembership($this->authUser);
+       //var_dump($grps);
+        $isAdmin = $g->inAdmin;
+        
+        if (!$isAdmin && $ev->person_id != $this->authUser->id) {
+            $this->jerrAuth();
+        }
+        
+        
+        
         
         
     }