From 7667d965381e4dab72f9465eec202b78595486ed Mon Sep 17 00:00:00 2001
From: Krivchikov Dmitry <krivchikovda@gmail.com>
Date: Fri, 26 Sep 2014 22:11:33 +0400
Subject: [PATCH] =?UTF-8?q?FIX=20-=20=D0=B7=D0=B0=D0=B3=D1=80=D1=83=D0=B7?=
 =?UTF-8?q?=D0=BA=D0=B0=20=D1=84=D0=BE=D1=82=D0=BE=D0=BA=D0=BE=20=D0=BF?=
 =?UTF-8?q?=D0=BE=D0=BB=D1=8C=D0=B7=D0=BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB?=
 =?UTF-8?q?=D0=B5=D0=BC=20=D0=BF=D1=80=D0=B8=20=D1=81=D0=BE=D0=B7=D0=B4?=
 =?UTF-8?q?=D0=B0=D0=BD=D0=B8=D0=B8=20=D1=82=D0=BE=D1=87=D0=BA=D0=B8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ground/controllers/JsonController.php | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/ground/controllers/JsonController.php b/ground/controllers/JsonController.php
index 3a90d73..1a8cbf9 100644
--- a/ground/controllers/JsonController.php
+++ b/ground/controllers/JsonController.php
@@ -95,10 +95,21 @@ class JsonController extends Controller
 		$errors = array();
 
 		if (!App::$user)
+		{
 			$errors[8] = 'Вы не авторизованы! Пожалуйста, войдите.';
-		if (isset($_POST['id']) && $_POST['id'] && App::$user->isAdmin == 0)
-			$errors[9] = 'Редактирование точек достурно только администратору!';
+		}
 
+		if (isset($_POST['id']) && $_POST['id'] && App::$user->isAdmin == 0)
+		{
+			$point = new Point();
+			$id = (int) $_POST['id'];
+			$point = $point->getByPK($id);
+
+			if ($point->author != App::$user->id || ($point->date+1800 < time() ))
+			{
+				$errors[9] = 'Редактирование точек достурно только администратору!';
+			}
+		}
 
 		$photos = $images = array();
 		$ordering = $_POST['ordering'];