zydronium/websitepanel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed: Ensure users are not able to update their subscriber number themselves

Browse source
This commit is contained in:
robvde 2012-09-25 14:02:51 +04:00
parent 2775dbcb1f
commit b424c73762
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WebsitePanel/Sources/WebsitePanel.WebPortal/DesktopModules/WebsitePanel/UserAccountEditDetails.ascx
View file

@ -41,7 +41,7 @@
<asp:Label ID="lblSubscriberNumber" runat="server" meta:resourcekey="lblSubscriberNumber" Text="Account Number:"></asp:Label> <asp:Label ID="lblSubscriberNumber" runat="server" meta:resourcekey="lblSubscriberNumber" Text="Account Number:"></asp:Label>
</td> </td>
<td class="NormalBold"> <td class="NormalBold">
<asp:TextBox id="txtSubscriberNumber" runat="server" CssClass="NormalTextBox"></asp:TextBox> <asp:TextBox id="txtSubscriberNumber" runat="server" CssClass="NormalTextBox" ></asp:TextBox>
</td> </td>
</tr> </tr>

7
WebsitePanel/Sources/WebsitePanel.WebPortal/DesktopModules/WebsitePanel/UserAccountEditDetails.ascx.cs
View file

@ -43,6 +43,13 @@ namespace WebsitePanel.Portal
if (PortalUtils.GetHideDemoCheckbox()) rowDemo.Visible = false; if (PortalUtils.GetHideDemoCheckbox()) rowDemo.Visible = false;
} }
if (PanelSecurity.LoggedUser.Role == UserRole.User)
{
txtSubscriberNumber.ReadOnly = true;
}
} }
private void BindUser() private void BindUser()