diff --git a/webtools/update/developers/appmanager.php b/webtools/update/developers/appmanager.php index 4fb60bc4dc94..1065891e32b0 100755 --- a/webtools/update/developers/appmanager.php +++ b/webtools/update/developers/appmanager.php @@ -12,9 +12,7 @@ include"$page_header"; include"inc_sidebar.php"; ?> Access Denied\n"; echo"You do not have access to the Application Manager"; include"$page_footer"; diff --git a/webtools/update/developers/inc_sidebar.php b/webtools/update/developers/inc_sidebar.php index 82204174a652..a0ab1dd621c7 100755 --- a/webtools/update/developers/inc_sidebar.php +++ b/webtools/update/developers/inc_sidebar.php @@ -24,9 +24,6 @@ if ($_SESSION["level"] == "user") { ?>
  • ">Your Profile
  • Approval Queue
  • -
  • Themes list
  • -
  • Extensions list
  • -
  • Users Manager
  • Comments Manager
  • Reviews Manager
  • Access Denied\n"; - echo"You do not have access to this item."; - include"$page_footer"; - echo"\n"; - exit; - } +//this screen is only for admins +if ($_SESSION["level"] !=="admin") { + echo"

    Access Denied

    \n"; + echo"You do not have access to this item."; + include"$page_footer"; + echo"\n"; + exit; } ?> diff --git a/webtools/update/developers/usermanager.php b/webtools/update/developers/usermanager.php index 62cc8d41387d..6f3ba6317e92 100755 --- a/webtools/update/developers/usermanager.php +++ b/webtools/update/developers/usermanager.php @@ -59,12 +59,10 @@ class PermissionsManager { $function = $_GET["function"]; $perms=new PermissionsManager($function); -//Access Level: "user" code, to keep user from altering other profiles but their own. -if ($_SESSION["level"] !=="admin" and $_SESSION["level"] !=="editor") { +//Access Level: only admins can edit somebody else's profile +if ($_SESSION["level"] !=="admin") { //Kill access to add user. - if ($function=="adduser" or $function=="postnewuser") {unset($function);} - - if (!$function) { $function="edituser"; } + $function="edituser"; $userid=$_SESSION["uid"]; }