From 7c426a89790914190dbea3c3022b25d6064d1c1d Mon Sep 17 00:00:00 2001 From: mattf Date: Fri, 30 Jun 2017 18:43:34 +0000 Subject: [PATCH] Require modify_audiostore user permissions to access audio store page git-svn-id: svn://192.168.202.10@2785 3d104415-ff17-0410-8863-d5cf3c621b8a --- agc_2-X/trunk/www/vicidial/audio_store.php | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/agc_2-X/trunk/www/vicidial/audio_store.php b/agc_2-X/trunk/www/vicidial/audio_store.php index eef9c132..3623c701 100644 --- a/agc_2-X/trunk/www/vicidial/audio_store.php +++ b/agc_2-X/trunk/www/vicidial/audio_store.php @@ -27,10 +27,11 @@ # 170301-1650 - Added validation that sounds web dir exists # 170409-1555 - Added IP List validation code # 170602-1042 - Prevent non-wav/gsm files from being uploaded +# 170630-1440 - Require modify_audiostore user permissions to access this page # -$version = '2.14-21'; -$build = '170602-1042'; +$version = '2.14-22'; +$build = '170630-1440'; $MT[0]=''; @@ -198,7 +199,7 @@ if ( (!preg_match("/\|$ip\|/", $server_ips)) and ($formIPvalid < 1) ) if ($auth > 0) { - $stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and user_level > 7 and( (modify_campaigns='1') or (modify_audiostore='1') );"; + $stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and user_level > 7 and (modify_audiostore='1');"; if ($DB) {echo "|$stmt|\n";} $rslt=mysql_to_mysqli($stmt, $link); $row=mysqli_fetch_row($rslt);