forward port of becoming illegal userId bugfix

This commit is contained in:
Colin Kuskie 2006-02-14 06:50:14 +00:00
parent 32169aebbf
commit 0c69c93f41
2 changed files with 17 additions and 0 deletions

View file

@ -222,6 +222,7 @@ Allows an administrator to assume another user.
sub www_becomeUser {
my $session = shift;
return $session->privilege->adminOnly() unless ($session->user->isInGroup(3));
return unless WebGUI::User->validUserId($session, $session->form->process("uid"));
$session->user({userId=>$session->form->process("uid")});
$session->var->end($session->var->get("sessionId"));
$session->var->start($session->form->process("uid"),$session->getId);