summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--web/html/packages.php10
1 files changed, 8 insertions, 2 deletions
diff --git a/web/html/packages.php b/web/html/packages.php
index 604ba72..4ea4b01 100644
--- a/web/html/packages.php
+++ b/web/html/packages.php
@@ -202,8 +202,14 @@ if (isset($_REQUEST["do_Flag"])) {
$q.= "WHERE Packages.ID IN (" . $delete . ") ";
$q.= "AND Packages.LocationID = PackageLocations.ID ";
$q.= "AND PackageLocations.Location = 'unsupported' ";
- $q.= "AND $field IN (0, " . uid_from_sid($_COOKIE["AURSID"]) . ")";
- $result = db_query($q, $dbh);
+ # If they're a TU or dev, can always delete, otherwise check ownership
+ #
+ if ($atype == "Trusted User" || $atype == "Developer") {
+ $result = db_query($q, $dbh);
+ } else {
+ $q.= "AND $field IN (0, " . uid_from_sid($_COOKIE["AURSID"]) . ")";
+ $result = db_query($q, $dbh);
+ }
if ($result != Null && mysql_num_rows($result) > 0) {
while ($row = mysql_fetch_assoc($result)) {
$ids_to_delete[] = $row['ID'];