assert darf login nicht asu form holen, weil das vom User überschrieben werden kann.

[mfinanz.git] / SL / Auth.pm

diff --git a/SL/Auth.pm b/SL/Auth.pm
index 109b75ce3e3477abcf0288469723b0bc1e109ac2..77ea226ae0ff7b03171e26821d21a6c22bd8305c 100644 (file)
--- a/SL/Auth.pm
+++ b/SL/Auth.pm
@@ -1095,7 +1095,7 @@ sub assert {
   $::lxdebug->enter_sub(2);
   my ($self, $right, $dont_abort) = @_;
 
-  if ($self->check_right($::form->{login}, $right)) {
+  if ($self->check_right($::myconfig{login}, $right)) {
     $::lxdebug->leave_sub(2);
     return 1;
   }