Update blog post code, use new check_user function and remove now superfluous get_user call, thanks 9soul for the report!

This commit is contained in:
Uriel 2008-11-15 20:44:34 +01:00
parent 48d3734523
commit c7460104dc

View file

@ -3,14 +3,13 @@ get_post_args target_blog_dir post_title post_body
if(~ $REQUEST_METHOD POST && ! ~ $#target_blog_dir 0 && ! ~ $#post_title 0) {
get_user
# XXX Need a generic way to load the complete config hierarchy for a given path
if(test -f $sitedir/$target_blog_dir/_werc/config)
. $sitedir/$target_blog_dir/_werc/config
if(~ $#blog_editors_group 0)
echo Cant post to $target_blog_dir, no editors group set.
if not if (! user_in_group $blog_editors_group)
if not if (! check_user $blog_editors_group)
echo Post to $target_blog_dir denied, user $logged_user not in group $blog_editors_group
if not if(! make_blog_post $target_blog_dir $post_title $post_body)
echo Posting to $target_blog_dir failed: $status