Changeset 1802

Show
Ignore:
Timestamp:
04/08/08 07:53:39 (8 months ago)
Author:
fumiakiy
Message:

Applied patch submitted by Jay Allen. The patch fixed the "permission denied" error when blog administrator tried to save plugin config. BugId:78878. Thanks Jay!

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branches/release-34/lib/MT/CMS/Plugin.pm

    r1369 r1802  
    4040    my $app = shift; 
    4141 
    42     $app->validate_magic or return; 
    43     return $app->errtrans("Permission denied.") 
    44         unless $app->user->can_manage_plugins; 
    45  
    4642    my $q          = $app->param; 
    4743    my $plugin_sig = $q->param('plugin_sig'); 
    4844    my $profile    = $MT::Plugins{$plugin_sig}; 
    4945    my $blog_id    = $q->param('blog_id'); 
     46 
     47    $app->validate_magic or return; 
     48    return $app->errtrans("Permission denied.") 
     49        unless $app->user->can_manage_plugins 
     50            or ($blog_id 
     51            and $app->user->permissions($blog_id)->can_administer_blog); 
     52 
    5053    my %param; 
    5154    my @params = $q->param; 
    …… 
    6669    my $app = shift; 
    6770 
    68     $app->validate_magic or return; 
    69     return $app->errtrans("Permission denied.") 
    70         unless $app->user->can_manage_plugins; 
    71  
    7271    my $q          = $app->param; 
    7372    my $plugin_sig = $q->param('plugin_sig'); 
    7473    my $profile    = $MT::Plugins{$plugin_sig}; 
    7574    my $blog_id    = $q->param('blog_id'); 
     75 
     76    $app->validate_magic or return; 
     77    return $app->errtrans("Permission denied.") 
     78        unless $app->user->can_manage_plugins 
     79            or ($blog_id 
     80            and $app->user->permissions($blog_id)->can_administer_blog); 
     81 
    7682    my %param; 
    7783    if ( $profile && $profile->{object} ) {