tags 408568 + patch
thanks

Hi,

Attached is the diff for my gosa 2.5.6-2.1 NMU.

-- 
Luk Claes - http://people.debian.org/~luk - GPG key 1024D/9B7C328D
Fingerprint:   D5AF 25FB 316B 53BB 08E7   F999 E544 DE07 9B7C 328D
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/debian/changelog /tmp/gxckSvscdC/gosa-2.5.6/debian/changelog
--- /tmp/S7cb9g3kUK/gosa-2.5.6/debian/changelog	2006-11-17 13:47:25.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/debian/changelog	2007-02-03 17:16:25.000000000 +0100
@@ -1,3 +1,10 @@
+gosa (2.5.6-2.1) testing-proposed-updates; urgency=high
+
+  * Non-maintainer upload to fix security issue.
+  * Applied security patch supplied by maintainer (Closes: #408568).
+
+ -- Luk Claes <[EMAIL PROTECTED]>  Sat,  3 Feb 2007 16:15:10 +0000
+
 gosa (2.5.6-2) unstable; urgency=low
 
   * Fixed smarty dependencies 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/applications/class_applicationParameters.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/applications/class_applicationParameters.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/applications/class_applicationParameters.inc	2006-11-15 12:33:02.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/applications/class_applicationParameters.inc	2007-02-03 17:14:11.000000000 +0100
@@ -43,7 +43,7 @@
 	plugin::execute();
 
 	/* Do we need to flip is_account state? */
-	if (isset($_POST['modify_state'])){
+	if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
 		$this->is_account= !$this->is_account;
 	}
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/groups/class_groupApplication.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/groups/class_groupApplication.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/groups/class_groupApplication.inc	2006-11-15 13:07:35.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/groups/class_groupApplication.inc	2007-02-03 17:14:11.000000000 +0100
@@ -383,7 +383,7 @@
     }
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/groups/class_groupMail.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/groups/class_groupMail.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/groups/class_groupMail.inc	2006-11-15 05:14:31.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/groups/class_groupMail.inc	2007-02-03 17:14:11.000000000 +0100
@@ -311,7 +311,7 @@
     }
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/ogroups/class_mailogroup.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/ogroups/class_mailogroup.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/ogroups/class_mailogroup.inc	2006-11-15 11:01:27.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/ogroups/class_mailogroup.inc	2007-02-03 17:14:11.000000000 +0100
@@ -30,7 +30,7 @@
     plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/ogroups/class_phonequeue.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/ogroups/class_phonequeue.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/ogroups/class_phonequeue.inc	2006-09-15 08:04:30.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/ogroups/class_phonequeue.inc	2007-02-03 17:14:11.000000000 +0100
@@ -103,7 +103,7 @@
 	plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_glpiAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_glpiAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_glpiAccount.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_glpiAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -556,7 +556,7 @@
     }
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_glpiPrinterAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_glpiPrinterAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_glpiPrinterAccount.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_glpiPrinterAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -190,7 +190,7 @@
      */
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_goSpamServer.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_goSpamServer.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_goSpamServer.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_goSpamServer.inc	2007-02-03 17:14:11.000000000 +0100
@@ -92,7 +92,7 @@
 
       $smarty->assign("servtabs",true);
       /* Do we need to flip is_account state? */
-      if (isset($_POST['modify_state'])) {
+      if (isset($_POST['modify_state']) && $this->acl == "#all#" ) {
         $this->is_account = !$this->is_account;
       }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_goVirusServer.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_goVirusServer.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_goVirusServer.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_goVirusServer.inc	2007-02-03 17:14:11.000000000 +0100
@@ -70,7 +70,7 @@
       $smarty->assign("servtabs",TRUE);
 
       /* Do we need to flip is_account state? */
-      if (isset($_POST['modify_state'])) {
+      if (isset($_POST['modify_state']) && $this->acl == "#all#" ) {
         $this->is_account = !$this->is_account;
       }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_inventory.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_inventory.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_inventory.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_inventory.inc	2007-02-03 17:14:11.000000000 +0100
@@ -27,7 +27,7 @@
     $display= "";
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_printGeneric.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_printGeneric.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_printGeneric.inc	2006-11-17 09:28:44.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_printGeneric.inc	2007-02-03 17:14:11.000000000 +0100
@@ -284,7 +284,7 @@
     }
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_modified = true;
       $this->is_account= !$this->is_account;
     }
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servDHCP.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servDHCP.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servDHCP.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servDHCP.inc	2007-02-03 17:14:11.000000000 +0100
@@ -27,7 +27,7 @@
     $display= "";
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servDNS.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servDNS.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servDNS.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servDNS.inc	2007-02-03 17:14:11.000000000 +0100
@@ -59,7 +59,7 @@
 
     /* Do we need to flip is_account state? 
      */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servKolab.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servKolab.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servKolab.inc	2006-09-29 05:51:12.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servKolab.inc	2007-02-03 17:14:11.000000000 +0100
@@ -105,7 +105,7 @@
      ***************/  
   
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])) {
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ) {
       $this->is_account = !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servRepository.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servRepository.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_servRepository.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_servRepository.inc	2007-02-03 17:14:11.000000000 +0100
@@ -88,7 +88,7 @@
 
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_terminalGeneric.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_terminalGeneric.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_terminalGeneric.inc	2006-10-16 10:04:05.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_terminalGeneric.inc	2007-02-03 17:14:11.000000000 +0100
@@ -125,7 +125,7 @@
     plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_terminalService.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_terminalService.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_terminalService.inc	2006-10-09 11:54:00.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_terminalService.inc	2007-02-03 17:14:11.000000000 +0100
@@ -244,7 +244,7 @@
 	plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_terminalStartup.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_terminalStartup.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_terminalStartup.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_terminalStartup.inc	2007-02-03 17:14:11.000000000 +0100
@@ -155,7 +155,7 @@
 	plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_workstationGeneric.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_workstationGeneric.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_workstationGeneric.inc	2006-11-14 07:09:18.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_workstationGeneric.inc	2007-02-03 17:14:11.000000000 +0100
@@ -130,7 +130,7 @@
     plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_workstationService.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_workstationService.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_workstationService.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_workstationService.inc	2007-02-03 17:14:11.000000000 +0100
@@ -242,7 +242,7 @@
     plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_workstationStartup.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_workstationStartup.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/admin/systems/class_workstationStartup.inc	2006-11-15 12:03:14.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/admin/systems/class_workstationStartup.inc	2007-02-03 17:14:11.000000000 +0100
@@ -479,7 +479,7 @@
   	plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/gofax/faxaccount/class_gofaxAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/gofax/faxaccount/class_gofaxAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/gofax/faxaccount/class_gofaxAccount.inc	2006-11-14 07:03:34.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/gofax/faxaccount/class_gofaxAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -135,7 +135,7 @@
     }
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/gofon/phoneaccount/class_phoneAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/gofon/phoneaccount/class_phoneAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/gofon/phoneaccount/class_phoneAccount.inc	2006-11-10 13:51:18.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/gofon/phoneaccount/class_phoneAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -624,7 +624,7 @@
     }
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/environment/class_environment.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/environment/class_environment.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/environment/class_environment.inc	2006-11-14 12:41:17.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/environment/class_environment.inc	2007-02-03 17:14:11.000000000 +0100
@@ -292,7 +292,7 @@
       $this->attrs['uid'] = $this->cn;
 
       /* Change state if needed */
-      if (isset($_POST['modify_state'])){
+      if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
         $this->is_account= !$this->is_account;
       }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/mail/class_mailAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/mail/class_mailAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/mail/class_mailAccount.inc	2006-11-15 06:45:45.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/mail/class_mailAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -241,7 +241,7 @@
     /* Handle account state */
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/nagios/class_nagiosAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/nagios/class_nagiosAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/nagios/class_nagiosAccount.inc	2006-09-18 13:24:26.000000000 +0200
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/nagios/class_nagiosAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -89,7 +89,7 @@
     $display= "";
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/netatalk/class_netatalk.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/netatalk/class_netatalk.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/netatalk/class_netatalk.inc	2006-11-10 14:01:10.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/netatalk/class_netatalk.inc	2007-02-03 17:14:11.000000000 +0100
@@ -158,7 +158,7 @@
     $display = "";
 
     /* Do we need to flip is_account state? */
-    if (isset ($_POST['modify_state'])) {
+    if (isset ($_POST['modify_state']) && $this->acl == "#all#" ) {
       $this->is_account = !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/posix/class_posixAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/posix/class_posixAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/posix/class_posixAccount.inc	2006-11-17 08:45:28.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/posix/class_posixAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -241,7 +241,7 @@
 
   if(!$isCopyPaste){
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
 
diff -Nru /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/samba/class_sambaAccount.inc /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/samba/class_sambaAccount.inc
--- /tmp/S7cb9g3kUK/gosa-2.5.6/plugins/personal/samba/class_sambaAccount.inc	2006-11-09 11:42:37.000000000 +0100
+++ /tmp/gxckSvscdC/gosa-2.5.6/plugins/personal/samba/class_sambaAccount.inc	2007-02-03 17:14:11.000000000 +0100
@@ -196,7 +196,7 @@
 	plugin::execute();
 
     /* Do we need to flip is_account state? */
-    if (isset($_POST['modify_state'])){
+    if (isset($_POST['modify_state']) && $this->acl == "#all#" ){
       $this->is_account= !$this->is_account;
     }
     /* Do we represent a valid account? */

Reply via email to