X-Git-Url: http://git.plutz.net/?p=busy;a=blobdiff_plain;f=write%2Fwikiedit.cgi;h=fc437ee549c6c19df2e75fabc0aba93211869e20;hp=29e312bd75cbc4f170ec51f8f56f555f0205833c;hb=904730d1782749bfac15b0344fe5782433f3099b;hpb=23dcf57a7ef4dbc488712bc510f4fc5e778404e9

diff --git a/write/wikiedit.cgi b/write/wikiedit.cgi
index 29e312b..fc437ee 100755
--- a/write/wikiedit.cgi
+++ b/write/wikiedit.cgi
@@ -15,6 +15,11 @@
 # You should have received a copy of the GNU Affero General Public License
 # along with Busy.  If not, see <http://www.gnu.org/licenses/>.
 
+[ "$HTTPS" = "on" ] && proto=https || proto=http
+. ../auth/permissions.sh
+$ACL_WIKIEDIT || echo "Location: ${proto}://${HTTP_HOST}/?p=Error&i=noaccess\n\n"
+$ACL_WIKIEDIT || exit 0
+
 info="$(egrep -o '(^|&)i=[0-9]{10}_[0-9]{3}(&|$)' <<<"${QUERY_STRING}" |tr -d '&=i')"
 [ -f "../Wiki/$info.lock" ] && rm "../Wiki/$info.lock"
 
@@ -32,4 +37,4 @@ fi
 [ -z "$cancel" -a -f "../Wiki/$info" ] && mv "../Wiki/$info" "../Wiki/$info.$(date +%s)"
 [ -z "$cancel" ] && echo -e "${page}" >"../Wiki/$info"
 
-echo -n "Location: http://${HTTP_HOST}/?p=Wiki&i=$info\n\n"
+echo -n "Location: ${proto}://${HTTP_HOST}/?p=Wiki&i=$info\n\n"