0001879,0001880: Fixes in htaccess constraints, restricting System Diagnostic view...
authorJanusz Dobrowolski <janusz@frontaccouting.eu>
Mon, 5 Nov 2012 16:49:46 +0000 (17:49 +0100)
committerJanusz Dobrowolski <janusz@frontaccouting.eu>
Mon, 5 Nov 2012 16:49:46 +0000 (17:49 +0100)
.htaccess
applications/setup.php

index ffcd03e635c5769da99c54e894d4dc230c78ac49..12c3504fdb561901b83492e1760ae68a8f39b5d2 100644 (file)
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,5 @@
 # Protect sensitive files.
-<FilesMatch "\.(inc|po|sh|.*sql)$">
+<FilesMatch "\.(inc|po|sh|.*sql|log)$">
        Order allow,deny
 </FilesMatch>
 
index 7ee9fb792bd74d4141b591d925a4e48e1d27ec88..0079b75df21236f63f972453b494ee32c4772e01 100644 (file)
@@ -59,7 +59,7 @@ class setup_app extends application
                $this->add_lapp_function(2, _("&Attach Documents"),
                        "admin/attachments.php?filterType=20", 'SA_ATTACHDOCUMENT', MENU_MAINTENANCE);
                $this->add_lapp_function(2, _("System &Diagnostics"),
-                       "admin/system_diagnostics.php?", 'SA_OPEN', MENU_SYSTEM);
+                       "admin/system_diagnostics.php?", 'SA_SOFTWAREUPGRADE', MENU_SYSTEM);
 
                $this->add_rapp_function(2, _("&Backup and Restore"),
                        "admin/backups.php?", 'SA_BACKUP', MENU_SYSTEM);