flashii/misuzu
flashii/misuzu
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't expose manage urls to people without manage access.

Browse source
This commit is contained in:
flash 2019-07-05 02:17:22 +02:00
parent 045b5d768e
commit d2f3eab015
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/url.php
View file

@ -196,9 +196,14 @@ function url_variable(string $value, array $variables): string {
} }
function url_list(): array { function url_list(): array {
global $hasManageAccess;
$collection = []; $collection = [];
foreach(MSZ_URLS as $name => $urlInfo) { foreach(MSZ_URLS as $name => $urlInfo) {
if(empty($hasManageAccess) && starts_with($name, 'manage-'))
continue;
$item = [ $item = [
'name' => $name, 'name' => $name,
'path' => $urlInfo[0], 'path' => $urlInfo[0],