Commit 842d4c73 authored by Leigh Stoller's avatar Leigh Stoller

Minor permission fix.

parent 4f62b9d8
<?php
#
# Copyright (c) 2000-2017 University of Utah and the Flux Group.
# Copyright (c) 2000-2018 University of Utah and the Flux Group.
#
# {{{EMULAB-LICENSE
#
......@@ -389,7 +389,8 @@ function Do_EditMembership()
}
if ($action == "remove") {
# Check permission to do this. This is really a project test.
if (!$target_group->CanDeleteUser($this_user, $target_user)) {
if (!ISADMIN() &&
!$target_group->CanDeleteUser($this_user, $target_user)) {
SPITAJAX_ERROR(-1, "Not allowed to remove user: $uid");
return -1;
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment