[dw-free] http://bugs.dwscoalition.org/show_bug.cgi?id=3085

[fu]

[commit: http://hg.dwscoalition.org/dw-free/rev/9882603b1f6c]

http://bugs.dwscoalition.org/show_bug.cgi?id=3085

Only allow full access to community administrators.

Patch by fu.

Files modified:

• htdocs/search.bml

--------------------------------------------------------------------------------
diff -r 7331658fe761 -r 9882603b1f6c htdocs/search.bml
--- a/htdocs/search.bml	Mon Oct 04 08:43:41 2010 +0800
+++ b/htdocs/search.bml	Mon Oct 04 08:57:29 2010 +0800
@@ -113,8 +113,8 @@ body<=
         if ( $remote->equals( $su ) ) {
             $ignore_security = 1;
 
-        # or a comm you're in ...
-        } elsif ( $su->is_community && $remote->member_of( $su ) ) {
+        # or a comm you administer...
+        } elsif ( $su->is_community && $remote->can_manage( $su ) ) {
             $ignore_security = 1;
 
         # otherwise, if they trust you, get the mask ...
--------------------------------------------------------------------------------