better comments by author

Removes some restrictions previously added. Or else we would need a 'userComments' privilege. But that would not make too much sense, since we already work with the lowest group privilege here.
This still is not ready yet, I presume. It needs more finetuning like answer to comments, etc.
Please help testing.

References #385
This commit is contained in:
Ian 2016-02-03 18:12:17 +01:00
parent 7f7f452388
commit 0af650be44
3 changed files with 2 additions and 18 deletions

View File

@ -4,17 +4,6 @@ if (IN_serendipity !== true) {
die ("Don't hack!");
}
$trusted = false;
if ($serendipity['serendipityUserlevel'] == 0 && $serendipity['GET']['authorid'] == $serendipity['authorid']) {
$serendipity['POST'] = $serendipity['GET'];
$trusted = true;
}
if (!serendipity_checkPermission('adminComments') && !$trusted) {
return;
}
$data = array();
$commentsPerPage = (int)(!empty($serendipity['GET']['filter']['perpage']) ? $serendipity['GET']['filter']['perpage'] : 10);

View File

@ -174,7 +174,7 @@ if (!$use_installer && $is_logged_in) {
break;
case 'comments':
// perms are checked inside
// perms are checked by author
include S9Y_INCLUDE_PATH . 'include/admin/comments.inc.php';
$admin_section = COMMENTS;
break;

View File

@ -126,20 +126,15 @@
</ul>
</li>
{/if}
{if 'adminComments'|checkPermission}
<li><h3>{$CONST.MENU_ACTIVITY}</h3>
<ul>
{if 'adminComments'|checkPermission}
<li><a href="serendipity_admin.php?serendipity[adminModule]=comments">{$CONST.COMMENTS}</a></li>
{/if}
{if $admin_vars.no_create !== true}
{if 'adminPlugins'|checkPermission AND $admin_vars.no_create !== true}
{serendipity_hookPlugin hook="backend_sidebar_admin_appearance" hookAll="true"}
{/if}
</ul>
</li>
{/if}
{if 'adminUsersGroups'|checkPermission OR 'adminImport'|checkPermission OR 'siteConfiguration'|checkPermission OR 'blogConfiguration'|checkPermission OR 'adminUsers'|checkPermission OR 'adminTemplates'|checkPermission OR 'adminPlugins'|checkPermission}
<li><h3>{$CONST.MENU_SETTINGS}</h3>