Changeset 20
- Timestamp:
- 08/31/06 16:49:58 (2 years ago)
- Files:
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
trunk/apps/snippets/modules/snippet/actions/actions.class.php
r14 r20 38 38 { 39 39 $snippet = SnippetSnippetPeer::retrieveByPk($this->getRequestParameter('id')); 40 $this->forward404Unless($snippet || $this->getUser()->getUserId() != $snippet->getSnippetUser()->getId());40 $this->forward404Unless($snippet && ($this->getUser()->getUserId() == $snippet->getSnippetUser()->getId() || $this->getUser()->hasCredential('admin'))); 41 41 } 42 42 else … … 61 61 { 62 62 $this->snippet = SnippetSnippetPeer::retrieveByPk($this->getRequestParameter('id')); 63 $this->forward404Unless($this->snippet && $this->getUser()->getUserId() == $this->snippet->getSnippetUser()->getId());63 $this->forward404Unless($this->snippet && ($this->getUser()->getUserId() == $this->snippet->getSnippetUser()->getId() || $this->getUser()->hasCredential('admin'))); 64 64 } 65 65 else trunk/apps/snippets/modules/snippet/templates/_snippet.php
r10 r20 40 40 <?php endif; ?> 41 41 42 <?php if ($sf_user->getUserId() == $snippet->getSnippetUser()->getId() ): ?>42 <?php if ($sf_user->getUserId() == $snippet->getSnippetUser()->getId() || $sf_user->hasCredential('admin')): ?> 43 43 <span class="admin_links"><?php echo link_to('[edit]', 'snippet/edit?id='.$snippet->getId()) ?></span> 44 44 <?php endif; ?>
