From 0397013a4044fd591079a007fb0cf126c5d85cd6 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Mon, 3 Dec 2007 04:48:12 +0000
Subject: [PATCH] Add more ACL checkers to help with port forward and one to
 one NAT for multi user.

---
 etc/inc/pfsense-utils.inc | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)

diff --git a/etc/inc/pfsense-utils.inc b/etc/inc/pfsense-utils.inc
index 8dbd3052e0..6921d42eae 100644
--- a/etc/inc/pfsense-utils.inc
+++ b/etc/inc/pfsense-utils.inc
@@ -33,6 +33,44 @@
  *
  */
 
+/****f* pfsense-utils/have_natonetooneruleint_access
+ * NAME
+ *   have_natonetooneruleint_access
+ * INPUTS
+ *	 none
+ * RESULT
+ *   returns true if user has access to edit a specific firewall nat one to one interface
+ ******/
+function have_natonetooneruleint_access($if) {
+	global $config, $g, $HTTP_SERVER_VARS;
+	$allowed = $g['privs'];
+	if (isSystemAdmin($HTTP_SERVER_VARS['AUTH_USER'])) 
+		return true;
+	$security_url = "firewall_nat_1to1_edit.php?if=". strtolower($if);
+	if(in_array($security_url, $allowed)) 
+		return true;
+	return false;
+}
+
+/****f* pfsense-utils/have_natpfruleint_access
+ * NAME
+ *   have_natpfruleint_access
+ * INPUTS
+ *	 none
+ * RESULT
+ *   returns true if user has access to edit a specific firewall nat port forward interface
+ ******/
+function have_natpfruleint_access($if) {
+	global $config, $g, $HTTP_SERVER_VARS;
+	$allowed = $g['privs'];
+	if (isSystemAdmin($HTTP_SERVER_VARS['AUTH_USER'])) 
+		return true;
+	$security_url = "firewall_nat_edit.php?if=". strtolower($if);
+	if(in_array($security_url, $allowed)) 
+		return true;
+	return false;
+}
+
 /****f* pfsense-utils/have_ruleint_access
  * NAME
  *   have_ruleint_access