This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "FusionForge".
The branch, Branch_5_3 has been updated
via 769d04c921570159809e380c228c8cb174255095 (commit)
from 3eacac39bef39afbaaa877a60f8d73d6a94a1641 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 769d04c921570159809e380c228c8cb174255095
Author: Sylvain Beucler <[email protected]>
Date: Fri May 23 17:07:46 2014 +0200
Forum: fix incorrect access check to post moderation
diff --git a/src/CHANGES b/src/CHANGES
index 5c5aa90..e128976 100644
--- a/src/CHANGES
+++ b/src/CHANGES
@@ -9,6 +9,7 @@ Fusionforge-5.3.1:
* Tracker: fix 404 in roadmap ajax call [#675] (TrivialDev)
* Tracker: user-friendly error message when tracker is not enabled in a
project (Inria)
* Forum: fix database error in rare conditions when saving position (Inria)
+* Forum: fix incorrect access check to post moderation (Inria)
* Web UI: Fix issue with old cookie that prevented user login after upgrade
(Inria)
* Plugin activation/desactivation (including switching VCS): optimize role
normalization (Inria)
* Home directories creation: optimize memory usage (Inria)
diff --git a/src/www/forum/admin/pendingmsgdetail.php
b/src/www/forum/admin/pendingmsgdetail.php
index f15638e..05b070f 100644
--- a/src/www/forum/admin/pendingmsgdetail.php
+++ b/src/www/forum/admin/pendingmsgdetail.php
@@ -42,7 +42,7 @@ if ( (!$forum_id) || (!$group_id) || (!$msg_id) ) {
exit_missing_param('',array(_('Forum ID'),_('Project ID'),_('Message
ID')),'forums');
}
-session_require_perm ('forum', $group_id, 'moderate') ;
+session_require_perm ('forum', $forum_id, 'moderate') ;
//print the message
$g =& $fa->GetGroupObject();
-----------------------------------------------------------------------
Summary of changes:
src/CHANGES | 1 +
src/www/forum/admin/pendingmsgdetail.php | 2 +-
2 files changed, 2 insertions(+), 1 deletion(-)
hooks/post-receive
--
FusionForge
_______________________________________________
Fusionforge-commits mailing list
[email protected]
http://lists.fusionforge.org/cgi-bin/mailman/listinfo/fusionforge-commits
