From c7460104dcac783eafdb6c197b9ec679b1dc87b2 Mon Sep 17 00:00:00 2001 From: Uriel Date: Sat, 15 Nov 2008 20:44:34 +0100 Subject: [PATCH] Update blog post code, use new check_user function and remove now superfluous get_user call, thanks 9soul for the report! --- lib/_apps/brag/post_form.tpl | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/lib/_apps/brag/post_form.tpl b/lib/_apps/brag/post_form.tpl index ea89dc9..303ed52 100644 --- a/lib/_apps/brag/post_form.tpl +++ b/lib/_apps/brag/post_form.tpl @@ -3,14 +3,13 @@ get_post_args target_blog_dir post_title post_body if(~ $REQUEST_METHOD POST && ! ~ $#target_blog_dir 0 && ! ~ $#post_title 0) { - get_user - + # XXX Need a generic way to load the complete config hierarchy for a given path if(test -f $sitedir/$target_blog_dir/_werc/config) . $sitedir/$target_blog_dir/_werc/config if(~ $#blog_editors_group 0) echo Cant post to $target_blog_dir, no editors group set. - if not if (! user_in_group $blog_editors_group) + if not if (! check_user $blog_editors_group) echo Post to $target_blog_dir denied, user $logged_user not in group $blog_editors_group if not if(! make_blog_post $target_blog_dir $post_title $post_body) echo Posting to $target_blog_dir failed: $status