From af22c24545b061ed3efd7e460a7abd3782d85cd5 Mon Sep 17 00:00:00 2001
From: z0rglub <z0rglub@piwigo.org>
Date: Thu, 9 Oct 2003 19:39:59 +0000
Subject: Only the webmaster can modify webmaster's permissions

git-svn-id: http://piwigo.org/svn/trunk@190 68402e56-0260-453c-a942-63ccdbb3a9ee
---
 admin/cat_perm.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/admin/cat_perm.php b/admin/cat_perm.php
index f77a01f0b..ac63e3b6e 100644
--- a/admin/cat_perm.php
+++ b/admin/cat_perm.php
@@ -128,7 +128,11 @@ if ( mysql_num_rows( $result ) > 0 )
 //----------------------------------------------------------------------- users
 $query = 'SELECT id,username,status';
 $query.= ' FROM '.PREFIX_TABLE.'users';
-$query.= " WHERE username != '".$conf['webmaster']."'";
+// only the webmaster can modify webmaster's permissions
+if ( $user['username'] != $conf['webmaster'] )
+{
+  $query.= " WHERE username != '".$conf['webmaster']."'";
+}
 $query.= ';';
 $result = mysql_query( $query );
 while ( $row = mysql_fetch_array( $result ) )
-- 
cgit v1.2.3