packages/ssoinabox-webui/root/usr/local/share/ssoinabox/htdocs/includes/starthere.php
--- a/packages/ssoinabox-webui/root/usr/local/share/ssoinabox/htdocs/includes/starthere.php Fri Jan 11 00:32:54 2013 -0500
+++ b/packages/ssoinabox-webui/root/usr/local/share/ssoinabox/htdocs/includes/starthere.php Fri Jan 11 05:41:41 2013 -0500
@@ -22,5 +22,11 @@
$adm = !empty($_SERVER['REMOTE_USER']) && ldap_test_group_membership($_SERVER['REMOTE_USER'], 'rtp');
define('IS_ADMIN', $adm);
+if ( !IS_ADMIN && defined('NEED_ADMIN') )
+{
+ queue_message(E_ERROR, "Access to that URL is restricted to administrators.");
+ redirect('/');
+}
+
if ( !isset($_SESSION['messages']) )
$_SESSION['messages'] = array();