Added 'groups' stuff, where we have different group bits that we can

put on a person or on a bug.  Some of the group bits control access to bugzilla
features.  And a person can't access a bug unless he has every group bit set
that is also set on the bug.

1 files changed, 4 insertions, 5 deletions

diff --git a/editparams.cgi b/editparams.cgi
index 75c7500d7..0171860da 100755
--- a/editparams.cgi
+++ b/editparams.cgi
@@ -28,16 +28,15 @@ require "defparams.pl";
 
 # Shut up misguided -w warnings about "used only once":
 use vars @::param_desc,
-    @::param_list,
-    %::COOKIE;
+    @::param_list;
 
 confirm_login();
 
 print "Content-type: text/html\n\n";
 
-if (Param("maintainer") ne $::COOKIE{Bugzilla_login}) {
-    print "<H1>Sorry, you aren't the maintainer of this system.</H1>\n";
-    print "And so, you aren't allowed to edit the parameters of it.\n";
+if (!UserInGroup("tweakparams")) {
+    print "<H1>Sorry, you aren't a member of the 'tweakparams' group.</H1>\n";
+    print "And so, you aren't allowed to edit the parameters.\n";
     exit;
 }