- fixed permission check for all *.php (Alexei)

git-svn-id: svn://svn.zabbix.com/trunk@483 97f52cf1-0a1b-0410-bd0e-c28be96e8082

1 files changed, 12 insertions, 0 deletions

diff --git a/frontends/php/chart4.php b/frontends/php/chart4.php
index 1cbd63bf..adf79d01 100644
--- a/frontends/php/chart4.php
+++ b/frontends/php/chart4.php
@@ -43,6 +43,8 @@
 	Header( "Content-type:  image/png"); 
 	Header( "Expires:  Mon, 17 Aug 1998 12:51:50 GMT"); 
 
+	check_authorisation();
+
 	$im = imagecreate($sizeX+$shiftX+61,$sizeY+$shiftYup+$shiftYdown+10); 
   
 	$red=ImageColorAllocate($im,255,0,0); 
@@ -66,6 +68,16 @@
 	ImageFilledRectangle($im,0,0,$x,$y,$white);
 	ImageRectangle($im,0,0,$x-1,$y-1,$black);
 
+	if(!check_right_on_trigger("R",$HTTP_GET_VARS["triggerid"]))
+	{
+//		show_table_header("<font color=\"AA0000\">No permissions !</font>");
+//		show_footer();
+		ImagePng($im); 
+		ImageDestroy($im); 
+		exit;
+	}
+
+
 	$trigger=get_trigger_by_triggerid($HTTP_GET_VARS["triggerid"]);
 	$str=$trigger["description"];