[geeklog-cvs] geeklog-1.3/public_html lib-common.php,1.374,1.375

[dhaun at iowaoutdoors.org]

Update of /var/cvs/geeklog-1.3/public_html
In directory www:/tmp/cvs-serv25267

Modified Files:
	lib-common.php 
Log Message:
Group Admins should not even see the groups of which they are not a member (bug #280).


Index: lib-common.php
===================================================================
RCS file: /var/cvs/geeklog-1.3/public_html/lib-common.php,v
retrieving revision 1.374
retrieving revision 1.375
diff -C2 -d -r1.374 -r1.375
*** lib-common.php	13 Sep 2004 19:02:54 -0000	1.374
--- lib-common.php	18 Sep 2004 15:43:04 -0000	1.375
***************
*** 2427,2434 ****
          if( SEC_hasrights( 'group.edit' ))
          {
              $url = $_CONF['site_admin_url'] . '/group.php';
              $adminmenu->set_var( 'option_url', $url );
              $adminmenu->set_var( 'option_label', $LANG01[96] );
!             $adminmenu->set_var( 'option_count', DB_count( $_TABLES['groups'] ));
  
              $retval .= $adminmenu->parse( 'item',
--- 2427,2439 ----
          if( SEC_hasrights( 'group.edit' ))
          {
+             $thisUsersGroups = SEC_getUserGroups();
+             $grp_list = implode( ',', $thisUsersGroups );
+             $result = DB_query( "SELECT COUNT(*) AS count FROM {$_TABLES['groups']} WHERE grp_id IN ($grp_list)" );
+             $A = DB_fetchArray( $result );
+ 
              $url = $_CONF['site_admin_url'] . '/group.php';
              $adminmenu->set_var( 'option_url', $url );
              $adminmenu->set_var( 'option_label', $LANG01[96] );
!             $adminmenu->set_var( 'option_count', $A['count'] );
  
              $retval .= $adminmenu->parse( 'item',