From 7f9e37e6a77a8bd7459412e54fea40bd069df271 Mon Sep 17 00:00:00 2001
From: Alan Knowles <alan@akbkhome.com>
Date: Tue, 21 Dec 2010 10:45:54 +0800
Subject: [PATCH] Pman/Login.php

---
 Pman/Login.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/Pman/Login.php b/Pman/Login.php
index c4e892b..ec63444 100644
--- a/Pman/Login.php
+++ b/Pman/Login.php
@@ -200,6 +200,15 @@ class Pman_Login extends Pman
             $this->jerr('Account disabled');
         }
         
+        // check if config allows non-owner passwords.
+        // auth_company = "OWNER"
+        $ff= HTML_FlexyFramework::get();
+        if (!empty($ff->Pman['auth_company']) && $ff->Pman['auth_company'] != $u->company()->comptype) {
+            $this->jerr("Login not permited to outside companies");
+        }
+        
+        
+        
         if ($u->checkPassword($_REQUEST['password'])) {
             $u->login();
             // we might need this later..
-- 
2.39.2