diff options
| author | Eugeniy Mikhailov <evgmik@gmail.com> | 2012-01-21 17:35:34 -0500 |
|---|---|---|
| committer | Eugeniy Mikhailov <evgmik@gmail.com> | 2012-01-21 17:35:34 -0500 |
| commit | 6a36c9831f9127aa1f82cb425e60f8e003877eee (patch) | |
| tree | 61469b97dd631d9ee2f60aec466955cf522adc48 | |
| parent | 510359683dbfee5000ef1470f7d7ead55bf56066 (diff) | |
| download | GradeBook-6a36c9831f9127aa1f82cb425e60f8e003877eee.tar.gz GradeBook-6a36c9831f9127aa1f82cb425e60f8e003877eee.zip | |
AccessGroupRights checks only against user name
| -rwxr-xr-x | GradeBook_lib.tcl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/GradeBook_lib.tcl b/GradeBook_lib.tcl index 0eeb478..35b8a67 100755 --- a/GradeBook_lib.tcl +++ b/GradeBook_lib.tcl @@ -1886,7 +1886,7 @@ proc Authenticate_User { user_requested password } { proc AccessGroupRights {db user password } { dbg "access rights check for user: $user" msg_level_info set PasswordHash [::md5::md5 -hex $password] - set eval_str [list SELECT GroupName FROM GradesTable WHERE UserName='$user' AND PasswordHash='$PasswordHash'] + set eval_str [list SELECT GroupName FROM GradesTable WHERE UserName='$user'] db eval $eval_str group_name_array {} if { [ info exist group_name_array(GroupName) ] } { set group $group_name_array(GroupName); |