check user right for update, read on computers

pluginsGLPI · Dec 7, 2023 · 033bdd2 · 033bdd2
1 parent 092ac94
commit 033bdd2
Show file tree

Hide file tree

Showing 6 changed files with 13 additions and 0 deletions.
diff --git a/ajax/ack.php b/ajax/ack.php
@@ -32,8 +32,11 @@
 
 include('../../../inc/includes.php');
 
+Session::checkRight('computer', UPDATE);
+
 header("Content-Type: text/html; charset=UTF-8");
 
+
 if (isset($_POST['hostid'])) {
     $host   = new Host();
     $res_a  = $host->acknowledgement($_POST['hostid'], $_POST['params']);

diff --git a/ajax/cancelDowntime.php b/ajax/cancelDowntime.php
@@ -32,6 +32,8 @@
 
 include('../../../inc/includes.php');
 
+Session::checkRight('computer', UPDATE);
+
 header("Content-Type: text/html; charset=UTF-8");
 
 if (isset($_POST['downtimeid'])) {

diff --git a/ajax/hostTimeline.php b/ajax/hostTimeline.php
@@ -33,6 +33,8 @@
 
 include('../../../inc/includes.php');
 
+Session::checkRight('computer', READ);
+
 header("Content-Type: text/html; charset=UTF-8");
 
 if (isset($_GET['period']) && isset($_GET['hostid'])) {

diff --git a/ajax/sendCheck.php b/ajax/sendCheck.php
@@ -32,6 +32,8 @@
 
 include('../../../inc/includes.php');
 
+Session::checkRight('computer', UPDATE);
+
 header("Content-Type: text/html; charset=UTF-8");
 
 if (isset($_POST['hostid'])) {

diff --git a/ajax/setDowntime.php b/ajax/setDowntime.php
@@ -32,6 +32,8 @@
 
 include('../../../inc/includes.php');
 
+Session::checkRight('computer', UPDATE);
+
 header("Content-Type: text/html; charset=UTF-8");
 
 if (isset($_POST['params'])) {

diff --git a/front/host.php b/front/host.php
@@ -33,6 +33,8 @@
 
 include('../../../inc/includes.php');
 
+Session::checkRight('computer', READ);
+
 Html::header(
     Host::getTypeName(),
     $_SERVER['PHP_SELF'],