Author: david
Date: Fri Oct  7 17:03:10 2011
New Revision: 9980

Log:
Prevent unauthorized users from viewing physical storage locations

Modified:
   
trunk/apps/qubit/modules/informationobject/actions/storageLocationsAction.class.php

Modified: 
trunk/apps/qubit/modules/informationobject/actions/storageLocationsAction.class.php
==============================================================================
--- 
trunk/apps/qubit/modules/informationobject/actions/storageLocationsAction.class.php
 Fri Oct  7 17:00:08 2011        (r9979)
+++ 
trunk/apps/qubit/modules/informationobject/actions/storageLocationsAction.class.php
 Fri Oct  7 17:03:10 2011        (r9980)
@@ -28,6 +28,11 @@
       $this->forward404();
     }
 
+    if (!$this->getUser()->isAuthenticated())
+    {
+      QubitAcl::forwardUnauthorized();
+    }
+
     $criteria = new Criteria;
 
     $criteria->setDistinct();

-- 
You received this message because you are subscribed to the Google Groups 
"Qubit Toolkit Commits" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/qubit-commits?hl=en.

Reply via email to