40 |
} |
} |
41 |
|
|
42 |
if ( isset( $p_jrn )) { |
if ( isset( $p_jrn )) { |
43 |
$g_jrn=$p_jrn; |
$p_jrn=$p_jrn; |
44 |
$_SESSION["g_jrn"]=$g_jrn; |
$_SESSION["p_jrn"]=$p_jrn; |
45 |
|
|
46 |
} |
} |
47 |
|
|
48 |
// Check privilege |
// Check privilege |
49 |
// CheckJrn verify that the user is not an admin |
// CheckJrn verify that the user is not an admin |
50 |
// an admin has all right |
// an admin has all right |
51 |
if ( CheckJrn($_SESSION['g_dossier'],$_SESSION['g_user'],$_SESSION['g_jrn']) != 2 ) { |
if ( CheckJrn($_SESSION['g_dossier'],$_SESSION['g_user'],$_GET['p_jrn']) != 2 ) { |
52 |
NoAccess(); |
NoAccess(); |
53 |
exit -1; |
exit -1; |
54 |
} |
} |