Added 'groups' stuff, where we have different group bits that we can

put on a person or on a bug.  Some of the group bits control access to bugzilla
features.  And a person can't access a bug unless he has every group bit set
that is also set on the bug.

1 files changed, 4 insertions, 5 deletions

diff --git a/doeditparams.cgi b/doeditparams.cgi
index dd6214982..1df99f077 100755
--- a/doeditparams.cgi
+++ b/doeditparams.cgi
@@ -28,17 +28,16 @@ require "defparams.pl";
 # Shut up misguided -w warnings about "used only once":
 use vars %::param,
     %::param_default,
-    @::param_list,
-    %::COOKIE;
+    @::param_list;
 
 
 confirm_login();
 
 print "Content-type: text/html\n\n";
 
-if (Param("maintainer") ne $::COOKIE{'Bugzilla_login'}) {
-    print "<H1>Sorry, you aren't the maintainer of this system.</H1>\n";
-    print "And so, you aren't allowed to edit the parameters of it.\n";
+if (!UserInGroup("tweakparams")) {
+    print "<H1>Sorry, you aren't a member of the 'tweakparams' group.</H1>\n";
+    print "And so, you aren't allowed to edit the parameters.\n";
     exit;
 }