- fixed permission check for all *.php (Alexei)

git-svn-id: svn://svn.zabbix.com/trunk@483 97f52cf1-0a1b-0410-bd0e-c28be96e8082

1 files changed, 12 insertions, 0 deletions

diff --git a/frontends/php/chart3.php b/frontends/php/chart3.php
index d308be33..64ff21e7 100644
--- a/frontends/php/chart3.php
+++ b/frontends/php/chart3.php
@@ -43,6 +43,8 @@
 	Header( "Content-type:  image/png"); 
 	Header( "Expires:  Mon, 17 Aug 1998 12:51:50 GMT"); 
 
+	check_authorisation();
+
 	$im = imagecreate($sizeX+$shiftX+61,$sizeY+$shiftYup+$shiftYdown+10); 
   
 	$red=ImageColorAllocate($im,255,0,0); 
@@ -65,6 +67,16 @@
 	ImageFilledRectangle($im,0,0,$sizeX+$shiftX+61,$sizeY+$shiftYup+$shiftYdown+10,$white);
 	ImageRectangle($im,0,0,$x-1,$y-1,$black);
 
+	if(!check_right("Item","R",$HTTP_GET_VARS["itemid"]))
+	{
+//		show_table_header("<font color=\"AA0000\">No permissions !</font>");
+//		show_footer();
+		ImagePng($im); 
+		ImageDestroy($im); 
+		exit;
+	}
+
+
 	$now = time(NULL);
 	$to_time=$now;
 	$from_time=$to_time-$period;