diff --git a/interface/lib/classes/tform.inc.php b/interface/lib/classes/tform.inc.php index db67f9ae75d99ed77dfe615a81799b0ce4799945..91359a3765c2f73f07d61dfb8e7e9a9f506edb69 100644 --- a/interface/lib/classes/tform.inc.php +++ b/interface/lib/classes/tform.inc.php @@ -858,7 +858,7 @@ class tform { if(@stristr($perm,$this->formDef["auth_preset"]["perm_other"])) $result = true; // if preset == 0, everyone can insert a record of this type - if($this->formDef["auth_preset"]["userid"] == 0 AND $this->formDef["auth_preset"]["groupid"] == 0) $result = true; + if($this->formDef["auth_preset"]["userid"] == 0 AND $this->formDef["auth_preset"]["groupid"] == 0 AND (@stristr($perm,$this->formDef["auth_preset"]["perm_user"] OR @stristr($perm,$this->formDef["auth_preset"]["perm_group"])) $result = true; return $result;