upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-04-23 07:08:34 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 54

fix removeuser.php for subadmins

Browse source
This commit is contained in:
Georg Ehrke 2012-07-18 17:23:40 +02:00
parent a5bebb86a5
commit fb6468936e
1 changed files with 17 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
settings/ajax/removeuser.php
View file

@ -3,11 +3,27 @@
// Init owncloud
require_once('../../lib/base.php');
OC_JSON::checkAdminUser();
OC_JSON::checkSubAdminUser();
OCP\JSON::callCheck();
$username = $_POST["username"];
if(!OC_Group::inGroup(OC_User::getUser(), 'admin') && OC_SubAdmin::isSubAdmin(OC_User::getUser())){
$accessiblegroups = OC_SubAdmin::getSubAdminsGroups(OC_User::getUser());
$isuseraccessible = false;
foreach($accessiblegroups as $accessiblegroup){
if(OC_Group::inGroup($username, $accessiblegroup)){
$isuseraccessible = true;
break;
}
}
if(!$isuseraccessible){
$l = OC_L10N::get('core');
self::error(array( 'data' => array( 'message' => $l->t('Authentication error') )));
exit();
}
}
// Return Success story
if( OC_User::deleteUser( $username )){
OC_JSON::success(array("data" => array( "username" => $username )));