summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorpiaip <piaip@63ad8ddf-47c3-0310-b6dd-a9e9d9715204>2010-11-10 18:49:53 +0800
committerpiaip <piaip@63ad8ddf-47c3-0310-b6dd-a9e9d9715204>2010-11-10 18:49:53 +0800
commite38f74c019f275da487ac455ae74933e5268a145 (patch)
tree71ee2af7c278971c02b3eef44386d7961549ba10
parentc7f700fc0dd74b72afadea235c23ce6472dbb40a (diff)
downloadpttbbs-e38f74c019f275da487ac455ae74933e5268a145.tar
pttbbs-e38f74c019f275da487ac455ae74933e5268a145.tar.gz
pttbbs-e38f74c019f275da487ac455ae74933e5268a145.tar.bz2
pttbbs-e38f74c019f275da487ac455ae74933e5268a145.tar.lz
pttbbs-e38f74c019f275da487ac455ae74933e5268a145.tar.xz
pttbbs-e38f74c019f275da487ac455ae74933e5268a145.tar.zst
pttbbs-e38f74c019f275da487ac455ae74933e5268a145.zip
fix: temporary manager in man should be able to do copy folder inside his
scope. git-svn-id: http://opensvn.csie.org/pttbbs/trunk@5240 63ad8ddf-47c3-0310-b6dd-a9e9d9715204
-rw-r--r--pttbbs/mbbsd/announce.c7
1 files changed, 5 insertions, 2 deletions
diff --git a/pttbbs/mbbsd/announce.c b/pttbbs/mbbsd/announce.c
index 7648e863..413c7c2e 100644
--- a/pttbbs/mbbsd/announce.c
+++ b/pttbbs/mbbsd/announce.c
@@ -1263,9 +1263,12 @@ a_menu_rec(const char *maintitle, const char *path,
// such extra behavior will result in any sub-op to have PERM_BM
// ability, which leads to entering BM board without authority.
// Thanks to mtdas@ptt for reporting this exploit.
- if (HasUserPerm(PERM_BASIC) && (ptr = strrchr(me.mtitle, '[')))
+ if (HasBasicUserPerm(PERM_LOGINOK) &&
+ !HasUserPerm(PERM_NOCITIZEN) &&
+ (ptr = strrchr(me.mtitle, '[')))
me.level = is_uBM(ptr + 1, cuser.userid);
}
+ vmsgf("me level: %d\n", me.level);
me.page = A_INVALID_PAGE;
if (preselect && !*preselect)
@@ -1460,7 +1463,7 @@ a_menu_rec(const char *maintitle, const char *path,
還是檔案竟然是用 fstat(2) 而不是直接存在 .DIR 內 |||b
須等該資料寫入 .DIR 內再 implement才有效率.
*/
- if( !lastlevel && !HasUserPerm(PERM_SYSOP) &&
+ if( !me.level && !HasUserPerm(PERM_SYSOP) &&
(me.bid==0 || !is_BM_cache(me.bid)) && dashd(fname) )
vmsg("只有板主才可以拷貝目錄唷!");
else