diff --git a/admin/committees.php b/admin/committees.php index 297599c..ce94701 100644 --- a/admin/committees.php +++ b/admin/committees.php @@ -179,7 +179,12 @@ if($_POST['save']) $access="access_admin='$a_admin', access_config='$a_config', access_super='$a_super', "; $pass="password='".mysql_escape_string(stripslashes($_POST['password']))."', "; } - else + else if(intval($_POST['save']) == $_SESSION['committee_member_id']) + { + $access=""; + $pass="password='".mysql_escape_string(stripslashes($_POST['password']))."', "; + } + else { $access=""; $pass=""; @@ -280,7 +285,7 @@ if($_GET['edit'] || $edit) echo "".i18n("Name").":name)."\" />"; - if(auth_has_access("super")) + if(auth_has_access("super") || ($_SESSION['committee_member_id'] == intval($e))) echo "".i18n("Password").":password\" />"; $cq=mysql_query("SELECT committees.name, committees.id, committees_link.title, committees_link.ord FROM committees,committees_link WHERE committees_link.committees_id=committees.id AND committees_link.committees_members_id='$e' ORDER BY committees.name"); diff --git a/common.inc.php b/common.inc.php index 3f5984b..659b582 100644 --- a/common.inc.php +++ b/common.inc.php @@ -419,6 +419,7 @@ echo "

".i18n($config['fairname'])."

"; if(auth_has_access("admin") || auth_has_access("config") || auth_has_access("super")) { if(auth_has_access("admin")){ ?> +