- fixed permission check for all *.php (Alexei)

git-svn-id: svn://svn.zabbix.com/trunk@483 97f52cf1-0a1b-0410-bd0e-c28be96e8082

1 files changed, 9 insertions, 0 deletions

diff --git a/frontends/php/graph.php b/frontends/php/graph.php
index a242192a..0398ec11 100644
--- a/frontends/php/graph.php
+++ b/frontends/php/graph.php
@@ -11,6 +11,15 @@
 ?>
 
 <?
+	if(!check_right("Graph","R",$HTTP_GET_VARS["graphid"]))
+	{
+		show_table_header("<font color=\"AA0000\">No permissions !</font>");
+		show_footer();
+		exit;
+	}
+?>
+
+<?
 	if(isset($HTTP_GET_VARS["register"]))
 	{
 		if($HTTP_GET_VARS["register"]=="add")