Adjust permission check

diff --git a/lib/general.php b/lib/general.php
index 8c95557..837a4b8 100644 (file)
--- a/lib/general.php
+++ b/lib/general.php
@@ -76,8 +76,8 @@ function check_session()
 
   /* table connections */
   if (substr($_SERVER["SCRIPT_FILENAME"],-25) == '/ricoUpdateConnection.php' &&
-      !empty($_POST['table'])) {
-    if (check_permissions($_POST['table']))
+      !empty($_GET['id']) && substr($_GET['id'],0,5) == 'grid_') {
+    if (check_permissions(substr($_GET['id'],5)))
       return true;
     else
       format_ajax(array('error' => 'No permission to access data'));