summaryrefslogtreecommitdiff
path: root/modules/user/controllers/admin_users.php
diff options
context:
space:
mode:
authorandyst <andy.st@gmail.com>2009-06-01 23:45:37 -0700
committerandyst <andy.st@gmail.com>2009-06-01 23:45:37 -0700
commit02a840c84cada5a1c0cc0768f350424460310e5d (patch)
tree6a35d4afddcf291327a4ff42245bca17328084ae /modules/user/controllers/admin_users.php
parentd0845aadc629cf10b8eee490a651c039750a1430 (diff)
parent3b6567f38c206f1302c7b22d94d5eae4b458311a (diff)
Merge branch 'master' of git@github.com:gallery/gallery3
Diffstat (limited to 'modules/user/controllers/admin_users.php')
-rw-r--r--modules/user/controllers/admin_users.php6
1 files changed, 6 insertions, 0 deletions
diff --git a/modules/user/controllers/admin_users.php b/modules/user/controllers/admin_users.php
index ac17c577..fe8061aa 100644
--- a/modules/user/controllers/admin_users.php
+++ b/modules/user/controllers/admin_users.php
@@ -28,6 +28,7 @@ class Admin_Users_Controller extends Controller {
public function add_user() {
access::verify_csrf();
+
$form = user::get_add_form_admin();
$valid = $form->validate();
$name = $form->add_user->inputs["name"]->value;
@@ -63,6 +64,7 @@ class Admin_Users_Controller extends Controller {
public function delete_user($id) {
access::verify_csrf();
+
if ($id == user::active()->id || $id == user::guest()->id) {
access::forbidden();
}
@@ -97,6 +99,7 @@ class Admin_Users_Controller extends Controller {
public function edit_user($id) {
access::verify_csrf();
+
$user = ORM::factory("user", $id);
if (!$user->loaded) {
kohana::show_404();
@@ -182,6 +185,7 @@ class Admin_Users_Controller extends Controller {
public function add_group() {
access::verify_csrf();
+
$form = group::get_add_form_admin();
$valid = $form->validate();
if ($valid) {
@@ -210,6 +214,7 @@ class Admin_Users_Controller extends Controller {
public function delete_group($id) {
access::verify_csrf();
+
$group = ORM::factory("group", $id);
if (!$group->loaded) {
kohana::show_404();
@@ -240,6 +245,7 @@ class Admin_Users_Controller extends Controller {
public function edit_group($id) {
access::verify_csrf();
+
$group = ORM::factory("group", $id);
if (!$group->loaded) {
kohana::show_404();