Version 3.4.5

upload/dav.php

@@ -2,7 +2,7 @@
 
 /*
 +---------------------------------------------------------------------------
-|   IP.Board v3.3.4
+|   IP.Board v3.4.5
 |   ========================================
 |   by Matthew Mecham
 |   (c) 2008 Invision Power Services
@@ -12,9 +12,9 @@
 |   Invision Power Board IS NOT FREE SOFTWARE!
 +---------------------------------------------------------------------------
 |   http://www.invisionpower.com/
-|   > $Id: dav.php 9336 2011-08-01 10:17:11Z mmecham $
-|   > $Revision: 9336 $
-|   > $Date: 2011-08-01 06:17:11 -0400 (Mon, 01 Aug 2011) $
+|   > $Id: dav.php 11663 2012-11-29 21:02:25Z AndyMillne $
+|   > $Revision: 11663 $
+|   > $Date: 2012-11-29 16:02:25 -0500 (Thu, 29 Nov 2012) $
 +---------------------------------------------------------------------------
 */
 @set_time_limit( 3600 );
@@ -109,13 +109,24 @@ class ipsDav
 	 		exit();
 		}
 		
+		/* Load permissions class */
+		$classToLoad = IPSLib::loadLibrary( IPS_ROOT_PATH . 'sources/classes/class_permissions.php', 'class_permissions' );
+		$this->registry->setClass( 'class_permissions', new $classToLoad( $this->registry ) );
+		
 		if ( ! $member['g_access_cp'] )
 		{
 			$auth->requireLogin();
 	 		print "Authentication Required (You are not an admin)";
 	 		exit();
 		}
-	 	
+		
+		if ( !$this->registry->getClass('class_permissions')->checkPermission( 'settemplates_external_edit' ) )
+		{
+			$auth->requireLogin();
+			print "You are not permitted to edit skins externally";
+			exit();
+		}
+			 	
 	 	/* Require some files for our sabre implementation */
 	 	require_once( IPS_ROOT_PATH . 'sources/classes/sabre/root/skins.php' );/*noLibHook*/
 	 	require_once( IPS_ROOT_PATH . 'sources/classes/sabre/directory/templates.php' );/*noLibHook*/