View | Details | Raw Unified | Return to bug 14321
Collapse All | Expand All

(-)a/tools/upload-file.pl (-4 / +3 lines)
Lines 48-62 my $sid = $cookies{'CGISESSID'}->value; Link Here
48
48
49
my $auth_failure = 1;
49
my $auth_failure = 1;
50
my ( $auth_status, $sessionID ) = check_cookie_auth( $sid );
50
my ( $auth_status, $sessionID ) = check_cookie_auth( $sid );
51
my $uid = C4::Auth::get_session($sid)->param('id');
51
foreach my $flag_required ( @{$flags_required} ) {
52
foreach my $flag_required ( @{$flags_required} ) {
52
    if ( my $flags = haspermission( C4::Context->config('user'), $flag_required ) ) {
53
    if ( my $flags = haspermission( $uid, $flag_required ) ) {
53
        $auth_failure = 0 if $auth_status eq 'ok';
54
        $auth_failure = 0 if $auth_status eq 'ok';
54
    }
55
    }
55
}
56
}
56
57
57
if ($auth_failure) {
58
if ($auth_failure) {
58
    $auth_status = 'denied' if $auth_status eq 'failed';
59
    send_reply( 'denied' );
59
    send_reply( $auth_status );
60
    exit 0;
60
    exit 0;
61
}
61
}
62
62
63
- 

Return to bug 14321