function acquia_spi_security_review_check_admin_permissions in Acquia Connector 6.2
Same name and namespace in other branches
- 7.3 acquia_spi/security_review.inc \acquia_spi_security_review_check_admin_permissions()
- 7.2 acquia_spi/security_review.inc \acquia_spi_security_review_check_admin_permissions()
Look for admin permissions granted to untrusted roles.
1 string reference to 'acquia_spi_security_review_check_admin_permissions'
- _acquia_spi_security_review_security_checks in acquia_spi/
security_review.inc - Checks for acquia_spi_security_review_get_checks().
File
- acquia_spi/
security_review.inc, line 503 - Stand-alone security checks and review system.
Code
function acquia_spi_security_review_check_admin_permissions() {
$result = TRUE;
$check_result_value = array();
// Collect the permissions untrusted roles have.
$untrusted = acquia_spi_security_review_untrusteds_permissions();
// Admin permissions.
$admin_perms = acquia_spi_security_review_admin_permissions();
// Check for intersections.
foreach ($untrusted as $rid => $permissions) {
$intersect = array_intersect($permissions, $admin_perms);
if (!empty($intersect)) {
$check_result_value[$rid] = $intersect;
}
}
if (!empty($check_result_value)) {
$result = FALSE;
}
return array(
'result' => $result,
'value' => $check_result_value,
);
}