oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

- karma rfe: Limiting access to admin mode to set of ip's

Browse source
This commit is contained in:
JT Smith 2006-11-08 17:43:44 +00:00
parent 2611279350
commit 899e9754b6
5 changed files with 36 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
lib/WebGUI/Operation/Admin.pm
View file

@ -33,7 +33,7 @@ If the current user is in the Turn On Admin Group, then return an Admin Console.
sub www_adminConsole {
my $session = shift;
return "" unless ($session->user->isInGroup(12));
return "" unless ($session->user->canUseAdminMode);
my $ac = WebGUI::AdminConsole->new($session);
return $ac->render;
}
@ -50,7 +50,7 @@ via WebGUI::Session::Var::switchAdminOff()
sub www_switchOffAdmin {
my $session = shift;
return "" unless ($session->user->isInGroup(12));
return "" unless ($session->user->canUseAdminMode);
$session->http->setCacheControl("none");
$session->var->switchAdminOff();
return "";
@ -66,7 +66,7 @@ If the current user is in the Turn On Admin Group, then allow them to turn on Ad
sub www_switchOnAdmin {
my $session = shift;
return "" unless ($session->user->isInGroup(12));
return "" unless ($session->user->canUseAdminMode);
$session->http->setCacheControl("none");
$session->var->switchAdminOn();
return "";

18
lib/WebGUI/User.pm
View file

@ -120,6 +120,24 @@ sub authMethod {
#-------------------------------------------------------------------
=head2 canUseAdminMode ( )
Returns a boolean indicating whether the user has the basic privileges needed to turn on admin mode and use basic admin functions. Note this isn't checking for any special privileges like whether the user can create new users, etc.
=cut
sub canUseAdminMode {
my $self = shift;
my $pass = 1;
my $subnets = $self->session->config->get("adminModeSubnets");
if (scalar(@$subnets)) {
$pass = isInSubnet($self->session->env->get("REMOTE_ADDR"), $subnets);
}
return $pass && $self->session->user->isInGroup(12)
}
#-------------------------------------------------------------------
=head2 dateCreated ( )
Returns the epoch for when this user was created.