Limit menu items to permitted ones according to group

diff --git a/lib/login.php b/lib/login.php
index 70ef0e4..4ba192f 100644 (file)
--- a/lib/login.php
+++ b/lib/login.php
@@ -23,6 +23,7 @@ function check_passwd()
                             'login' => $row['login'],
                             'name' => $row['name'],
                             'email' => $row['email'],
                             'login' => $row['login'],
                             'name' => $row['name'],
                             'email' => $row['email'],

+                            'group' => $row['gid'],

                             'basedir' => substr($_SERVER['SCRIPT_FILENAME'],0,-9));
     return true;
   }
                             'basedir' => substr($_SERVER['SCRIPT_FILENAME'],0,-9));
     return true;
   }

diff --git a/lib/menu.php b/lib/menu.php
index 60701d8..e20b4d0 100644 (file)
--- a/lib/menu.php
+++ b/lib/menu.php
@@ -15,6 +15,8 @@ function menu()
 
   $sql = "SELECT fname,menutitle,name FROM sys_mask "
     . "JOIN sys_menu ON sys_mask.menu = sys_menu.id "
 
   $sql = "SELECT fname,menutitle,name FROM sys_mask "
     . "JOIN sys_menu ON sys_mask.menu = sys_menu.id "

+    . "JOIN sys_group_mask ON sys_mask.id = sys_group_mask.mask "
+    . "WHERE sys_group_mask.gid = ".$_SESSION['sys']['group']." "

     . "ORDER BY sys_menu.priority,sys_menu.name,sys_mask.priority,sys_mask.menutitle";
   $sth = pg_query($sql);
 
     . "ORDER BY sys_menu.priority,sys_menu.name,sys_mask.priority,sys_mask.menutitle";
   $sth = pg_query($sql);