nieuws: authorise admins by edit subpermissions

[minimedit.git] / edit / nieuws / tag / index.php

diff --git a/edit/nieuws/tag/index.php b/edit/nieuws/tag/index.php
index c65b81ebd810cf54d70093d7c57029d8bb888bd4..9bfb5156b7e1208106bad6c8817c813263b40082 100644 (file)
--- a/edit/nieuws/tag/index.php
+++ b/edit/nieuws/tag/index.php
@@ -1,13 +1,13 @@
 <?php
-if (!$User or !$User->admin('news'))
-       abort("geen beheersrechten", '401 unauthorised');
-
 if (!$_POST)
        abort("niets te doen", '405 post error');
 if (!$Args)
        abort("pagina niet opgegeven", '409 input error');
 
 $pagename = ltrim($Args, '/').'.html';
+if (!$User or !$User->admin("edit $pagename"))
+       abort("geen beheersrechten", '401 unauthorised');
+
 @list ($category, $year, $article) = explode('/', $pagename);
 if (empty($article) or !file_exists($pagename))
        abort("artikel onbekend: $pagename", '404 page error');