|
@@ -166,8 +166,11 @@ def last_change(data):
|
|
|
def easy_minify(data, tool = None):
|
|
def easy_minify(data, tool = None):
|
|
|
return last_change(data)
|
|
return last_change(data)
|
|
|
|
|
|
|
|
-def render_set(title = '', data = '', num = 0, s_data = 0, include = None):
|
|
|
|
|
- if acl_check(title, 'render') == 1:
|
|
|
|
|
|
|
+def render_set(title = '', data = '', num = 0, s_data = 0, include = None, acl = None):
|
|
|
|
|
+ if not acl:
|
|
|
|
|
+ acl = acl_check(title, 'render')
|
|
|
|
|
+
|
|
|
|
|
+ if acl == 1:
|
|
|
return 'HTTP Request 401.3'
|
|
return 'HTTP Request 401.3'
|
|
|
elif s_data == 1:
|
|
elif s_data == 1:
|
|
|
return data
|
|
return data
|
|
@@ -871,18 +874,13 @@ def acl_check(name = 'test', tool = '', topic_num = '1'):
|
|
|
if tool == '' and acl_check(name, 'render') == 1:
|
|
if tool == '' and acl_check(name, 'render') == 1:
|
|
|
return 1
|
|
return 1
|
|
|
|
|
|
|
|
- if tool == '':
|
|
|
|
|
|
|
+ if tool == '' and tool == 'topic':
|
|
|
end = 3
|
|
end = 3
|
|
|
- elif tool == 'topic':
|
|
|
|
|
- if not name:
|
|
|
|
|
|
|
+
|
|
|
|
|
+ if tool == 'topic' and not name:
|
|
|
curs.execute(db_change("select title from rd where code = ?"), [topic_num])
|
|
curs.execute(db_change("select title from rd where code = ?"), [topic_num])
|
|
|
topic_data = curs.fetchall()
|
|
topic_data = curs.fetchall()
|
|
|
- if topic_data:
|
|
|
|
|
- name = topic_data[0][0]
|
|
|
|
|
- else:
|
|
|
|
|
- name = 'test'
|
|
|
|
|
-
|
|
|
|
|
- end = 3
|
|
|
|
|
|
|
+ name = topic_data[0][0] if topic_data else 'test'
|
|
|
elif tool == 'render':
|
|
elif tool == 'render':
|
|
|
end = 2
|
|
end = 2
|
|
|
else:
|
|
else:
|
|
@@ -981,17 +979,17 @@ def acl_check(name = 'test', tool = '', topic_num = '1'):
|
|
|
elif acl_data[0][0] == 'owner':
|
|
elif acl_data[0][0] == 'owner':
|
|
|
if admin_check() == 1:
|
|
if admin_check() == 1:
|
|
|
return 0
|
|
return 0
|
|
|
|
|
+ elif acl_data[0][0] == 'ban_admin':
|
|
|
|
|
+ if admin_check(1) == 1 or ban_check() == 1:
|
|
|
|
|
+ return 0
|
|
|
|
|
|
|
|
return 1
|
|
return 1
|
|
|
else:
|
|
else:
|
|
|
if i == (end - 1):
|
|
if i == (end - 1):
|
|
|
- if tool == 'topic':
|
|
|
|
|
- if topic_num:
|
|
|
|
|
- curs.execute(db_change("select title from rd where code = ? and stop != ''"), [topic_num])
|
|
|
|
|
- if curs.fetchall():
|
|
|
|
|
- if admin_check(3, 'topic (code ' + topic_num + ')') == 1:
|
|
|
|
|
- return 0
|
|
|
|
|
- else:
|
|
|
|
|
|
|
+ if tool == 'topic' and topic_num:
|
|
|
|
|
+ curs.execute(db_change("select title from rd where code = ? and stop != ''"), [topic_num])
|
|
|
|
|
+ if curs.fetchall():
|
|
|
|
|
+ if admin_check(3, 'topic (code ' + topic_num + ')') == 1:
|
|
|
return 0
|
|
return 0
|
|
|
else:
|
|
else:
|
|
|
return 0
|
|
return 0
|
|
@@ -1175,7 +1173,7 @@ def get_acl_list(type_d = 'normal'):
|
|
|
if type_d == 'user':
|
|
if type_d == 'user':
|
|
|
return ['', 'user', 'all']
|
|
return ['', 'user', 'all']
|
|
|
else:
|
|
else:
|
|
|
- return ['', 'all', 'user', 'admin', 'owner', '50_edit', 'email', 'ban', 'before', '30_day']
|
|
|
|
|
|
|
+ return ['', 'all', 'user', 'admin', 'owner', '50_edit', 'email', 'ban', 'before', '30_day', 'ban_admin']
|
|
|
|
|
|
|
|
def re_error(data):
|
|
def re_error(data):
|
|
|
conn.commit()
|
|
conn.commit()
|