From 4f16162665a7700c5aaab4eb55b91ddb96386960 Mon Sep 17 00:00:00 2001 From: Dmitriy Simushev Date: Sat, 18 Feb 2012 19:58:46 +0000 Subject: [PATCH] Forbidden editing groups from profile page, for operators without administrative permissions. --- src/messenger/webim/operator/opgroups.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/messenger/webim/operator/opgroups.php b/src/messenger/webim/operator/opgroups.php index 26018736..a83e1d91 100644 --- a/src/messenger/webim/operator/opgroups.php +++ b/src/messenger/webim/operator/opgroups.php @@ -44,8 +44,7 @@ $page['groups'] = get_all_groups($link); close_connection($link); $errors = array(); -$canmodify = ($opId == $operator['operatorid'] && is_capable($can_modifyprofile, $operator)) - || is_capable($can_administrate, $operator); +$canmodify = is_capable($can_administrate, $operator); $op = operator_by_id($opId);