- fixed permission check for all *.php (Alexei)

git-svn-id: svn://svn.zabbix.com/trunk@483 97f52cf1-0a1b-0410-bd0e-c28be96e8082

1 files changed, 9 insertions, 0 deletions

diff --git a/frontends/php/compare.php b/frontends/php/compare.php
index 2c8c0cd7..328870af 100644
--- a/frontends/php/compare.php
+++ b/frontends/php/compare.php
@@ -6,6 +6,15 @@
 ?>
 
 <?
+	if(!check_right("Item","R",$HTTP_GET_VARS["itemid"]))
+	{
+		show_table_header("<font color=\"AA0000\">No permissions !</font>");
+		show_footer();
+		exit;
+	}
+?>
+
+<?
 	show_table_header_begin();
 	$result=DBselect("select i.description,h.host,h.hostid from items i,hosts h where i.hostid=h.hostid and i.itemid=".$HTTP_GET_VARS["itemid"]);
 	$description=DBget_field($result,0,0);