Sophie

Sophie

distrib > Mageia > 1 > i586 > media > core-updates-src > by-pkgid > 4285d969b1b970965b1378e0feae69e1 > files > 1

sympa-6.1.4-2.3.mga1.src.rpm

--- branches/sympa-6.1-branch/wwsympa/wwsympa.fcgi.in	2012/05/09 12:55:38	7342
+++ branches/sympa-6.1-branch/wwsympa/wwsympa.fcgi.in	2012/05/11 09:13:28	7360
@@ -16204,6 +16204,11 @@
 sub do_arc_manage {
     &wwslog('info', "do_arc_manage ($in{'list'})");
 
+    ## Access control
+    unless (defined &check_authz('do_arc', 'web_archive.access')) {
+	return undef;
+    }
+    
     my $search_base = $wwsconf->{'arc_path'}.'/'.$list->get_list_id();
     opendir ARC, "$search_base";
     foreach my $dir (sort {$b cmp $a} grep(!/^\./,readdir ARC)) {
@@ -16221,6 +16226,11 @@
     
     &wwslog('info', "do_arc_download ($in{'list'})");
     
+    ## Access control
+    unless (defined &check_authz('do_arc', 'web_archive.access')) {
+	return undef;
+    }
+    
     ##zip file name:listname_archives.zip  
     my $zip_file_name = $in{'list'}.'_archives.zip';
     my $zip_abs_file = $Conf{'tmpdir'}.'/'.$zip_file_name;
@@ -16321,6 +16331,11 @@
     
     &wwslog('info', "do_arc_delete ($in{'list'})");
     
+    ## Access control
+    unless (defined &check_authz('do_arc', 'web_archive.access')) {
+	return undef;
+    }
+    
     unless (defined  $in{'directories'}){
       	&report::reject_report_web('user','select_month',{},$param->{'action'});
 	&wwslog('info','No Archives months selected');