--- branches/sympa-6.1-branch/wwsympa/wwsympa.fcgi.in 2012/05/09 12:55:38 7342 +++ branches/sympa-6.1-branch/wwsympa/wwsympa.fcgi.in 2012/05/11 09:13:28 7360 @@ -16204,6 +16204,11 @@ sub do_arc_manage { &wwslog('info', "do_arc_manage ($in{'list'})"); + ## Access control + unless (defined &check_authz('do_arc', 'web_archive.access')) { + return undef; + } + my $search_base = $wwsconf->{'arc_path'}.'/'.$list->get_list_id(); opendir ARC, "$search_base"; foreach my $dir (sort {$b cmp $a} grep(!/^\./,readdir ARC)) { @@ -16221,6 +16226,11 @@ &wwslog('info', "do_arc_download ($in{'list'})"); + ## Access control + unless (defined &check_authz('do_arc', 'web_archive.access')) { + return undef; + } + ##zip file name:listname_archives.zip my $zip_file_name = $in{'list'}.'_archives.zip'; my $zip_abs_file = $Conf{'tmpdir'}.'/'.$zip_file_name; @@ -16321,6 +16331,11 @@ &wwslog('info', "do_arc_delete ($in{'list'})"); + ## Access control + unless (defined &check_authz('do_arc', 'web_archive.access')) { + return undef; + } + unless (defined $in{'directories'}){ &report::reject_report_web('user','select_month',{},$param->{'action'}); &wwslog('info','No Archives months selected');