Index: branches/5.3.x/core/kernel/db/db_event_handler.php =================================================================== diff -u -N -r15974 -r15987 --- branches/5.3.x/core/kernel/db/db_event_handler.php (.../db_event_handler.php) (revision 15974) +++ branches/5.3.x/core/kernel/db/db_event_handler.php (.../db_event_handler.php) (revision 15987) @@ -1,6 +1,6 @@ Application->LinkVar('m_cat_id'); } - if ( $event->Name == 'OnSaveWidths' ) { - return $this->Application->isAdminUser; - } - return parent::CheckPermission($event); } @@ -104,7 +100,7 @@ $permissions = Array ( 'OnLoad' => Array ('self' => 'view', 'subitem' => 'view'), 'OnItemBuild' => Array ('self' => 'view', 'subitem' => 'view'), - 'OnSuggestValues' => Array ('self' => 'view', 'subitem' => 'view'), + 'OnSuggestValues' => Array ('self' => 'admin', 'subitem' => 'admin'), 'OnBuild' => Array ('self' => true), @@ -168,7 +164,7 @@ 'OnDeleteFile' => Array ('self' => true, 'subitem' => true), 'OnViewFile' => Array ('self' => true, 'subitem' => true), - 'OnSaveWidths' => Array ('self' => true, 'subitem' => true), + 'OnSaveWidths' => Array ('self' => 'admin', 'subitem' => 'admin'), 'OnValidateMInputFields' => Array ('self' => 'view'), 'OnValidateField' => Array ('self' => true, 'subitem' => true), @@ -3486,12 +3482,6 @@ */ protected function OnSuggestValues(kEvent $event) { - if ( !$this->Application->isAdminUser ) { - // very careful here, because this event allows to - // view every object field -> limit only to logged-in admins - return; - } - $event->status = kEvent::erSTOP; $field = $this->Application->GetVar('field');