Give sense to $hook['perms'] ==> non-admin cannot access admin pages !!!

git-svn-id: svn+ssh://murphy/home/svn/platal/branches/platal-0.9.11@1050 839d8a87-29fc-0310-9880-83ba4fa771e5

diff --git a/classes/Platal.php b/classes/Platal.php
index 8927418..52c2b47 100644 (file)
--- a/classes/Platal.php
+++ b/classes/Platal.php
@@ -98,6 +98,10 @@ class Platal
         $args    = $this->argv;
         $args[0] = &$page;
 
+        if (strlen($hook['perms']) && $hook['perms'] != Session::v('perms')) {
+            return PL_FORBIDDEN;
+        }
+
         if ($hook['auth'] > S::v('auth', AUTH_PUBLIC)) {
             global $globals;