From dcf307e234554507cb2b51afe9f75b6f5e915c19 Mon Sep 17 00:00:00 2001 From: Angel Fernando Quiroz Campos Date: Fri, 29 Apr 2016 18:30:02 -0500 Subject: [PATCH] Fix allow delete session to platform admin when he is different of session_admin_id - refs BT#11141 --- main/inc/lib/sessionmanager.lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main/inc/lib/sessionmanager.lib.php b/main/inc/lib/sessionmanager.lib.php index 230338c992..3fa467741e 100755 --- a/main/inc/lib/sessionmanager.lib.php +++ b/main/inc/lib/sessionmanager.lib.php @@ -1496,7 +1496,7 @@ class SessionManager $res = $qb->getSingleScalarResult(); - if ($res != $userId) { + if ($res != $userId && !api_is_platform_admin()) { api_not_allowed(true); } }