Commit eacbe9d8 authored by Richard Mansfield's avatar Richard Mansfield
Browse files

Only group admins should be allowed to edit the group homepage view (bug #631189)


Signed-off-by: default avatarRichard Mansfield <richardm@catalyst.net.nz>
parent 54b22317
......@@ -826,6 +826,9 @@ class User {
if ($group) {
$editroles = $v->get('editingroles');
$this->reset_grouproles();
if ($v->get('type') == 'grouphomepage' && $this->grouproles[$group] != 'admin') {
return false;
}
return isset($this->grouproles[$group]) && in_array($this->grouproles[$group], $editroles);
}
return false;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment