Skip to content

Commit

Permalink
Update admin permission check
Browse files Browse the repository at this point in the history
  • Loading branch information
samerton committed Apr 9, 2021
1 parent 439a36b commit db62810
Showing 1 changed file with 22 additions and 3 deletions.
25 changes: 22 additions & 3 deletions upload/modules/Infractions/module.php
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,27 @@ public function onPageLoad($user, $pages, $cache, $smarty, $navs, $widgets, $tem
'admincp.infractions.settings' => $this->_language->get('moderator', 'staff_cp') . ' » ' . $this->_infractions_language->get('infractions', 'infractions_settings')
));

// Permission check for admins - only temporary until group ID 2 is made into a super group
if ($user->isLoggedIn() && !$user->hasPermission('infractions.view')) {
$groups = $user->getGroups();

foreach ($groups as $group) {
if ($group->id == 2) {
// Update main admin group permissions
$queries = new Queries();
$group = $queries->getWhere('groups', array('id', '=', 2));
$group = $group[0];

$group_permissions = json_decode($group->permissions, true);
$group_permissions['infractions.view'] = 1;

$group_permissions = json_encode($group_permissions);
$queries->update('groups', 2, array('permissions' => $group_permissions));
break;
}
}
}

// navigation link location
$cache->setCache('infractions_module_cache');
if(!$cache->isCached('link_location')){
Expand All @@ -84,9 +105,7 @@ public function onPageLoad($user, $pages, $cache, $smarty, $navs, $widgets, $tem
}

if (!defined('BACK_END')) {
$groups = $user->isLoggedIn() ? $user->getGroups() : array();

if(($user->isLoggedIn() && ($user->hasPermission('infractions.view') || in_array(2, $groups))) || (!$user->isLoggedIn() && $guests_view)){
if(($user->isLoggedIn() && ($user->hasPermission('infractions.view'))) || (!$user->isLoggedIn() && $guests_view)){
// Add link to navbar
$cache->setCache('navbar_order');
if(!$cache->isCached('infractions_order')){
Expand Down

0 comments on commit db62810

Please sign in to comment.