X-Git-Url: http://git.roojs.org/?p=Pman.Core;a=blobdiff_plain;f=DataObjects%2FCore_person.php;fp=DataObjects%2FCore_person.php;h=27fce2e66a78f99a647d40c7168700580e8018a3;hp=a2942f83ed10ca50698815737131b5924913e045;hb=c0c79cf78b4621a25864535ba8aba31658c5aff2;hpb=10745a48595ec74ef4bbba9a1e2e52794c36db58

diff --git a/DataObjects/Core_person.php b/DataObjects/Core_person.php
index a2942f83..27fce2e6 100644
--- a/DataObjects/Core_person.php
+++ b/DataObjects/Core_person.php
@@ -1725,7 +1725,11 @@ class Pman_Core_DataObjects_Core_person extends DB_DataObject
     }
     function bulkUpdatePasswords($data, $roo)
     {
-         $rows = explode("\n",$data);
+        
+        if ( !$roo->hasPerm("Core.Staff", "E")) {
+            $roo->jerr("permission denied");
+        }
+        $rows = explode("\n",$data);
         $upd = array();
         $bad  = array();