<?php
	//admin sections!
	$SECTIONS['members']['SectionID']=1;
	$SECTIONS['members']['Name']='Manage Subscribers';

	$SECTIONS['lists']['SectionID']=2;
	$SECTIONS['lists']['Name']='Manage Lists';

	$SECTIONS['admins']['SectionID']=3;
	$SECTIONS['admins']['Name']='Manage Users';

	$SECTIONS['import']['SectionID']=4;
	$SECTIONS['import']['Name']='Import Subscribers';

	$SECTIONS['export']['SectionID']=5;
	$SECTIONS['export']['Name']='Export Subscribers';

	$SECTIONS['banned']['SectionID']=6;
	$SECTIONS['banned']['Name']='Manage Banned Subscribers';

	$SECTIONS['forms']['SectionID']=7;
	$SECTIONS['forms']['Name']='Manage Forms';

	$SECTIONS['customfields']['SectionID']=8;
	$SECTIONS['customfields']['Name']='Custom Subscriber Fields';

	$SECTIONS['templates']['SectionID']=10;
	$SECTIONS['templates']['Name']='Newsletter Templates';

	$SECTIONS['compose']['SectionID']=11;
	$SECTIONS['compose']['Name']='Manage Newsletters';

	$SECTIONS['send']['SectionID']=12;
	$SECTIONS['send']['Name']='Send Newsletter';

	$SECTIONS['autoresponders']['SectionID']=13;
	$SECTIONS['autoresponders']['Name']='Manage Autoresponders';

	$SECTIONS['stats']['SectionID']=14;
	$SECTIONS['stats']['Name']='Statistics';

	$SECTIONS['addsub']['SectionID']=16;
	$SECTIONS['addsub']['Name']='Add Subscribers via Form';

	$SECTIONS['attachments']['SectionID']=17;
	$SECTIONS['attachments']['Name']='Manage Attachments';

	/*
		We don't use this anywhere itself, it's an alternative to the popup window sending.
	*/
	$SECTIONS['scheduler']['SectionID']=18;
	$SECTIONS['scheduler']['Name']='Schedule Newsletters';

	$SECTIONS['remsub']['SectionID']=19;
	$SECTIONS['remsub']['Name']='Remove Subscribers';

	/*
		A root user has access to all actions but not necessarily all lists.
		A manager has access to all lists but not necessarily all actions.
	*/

	function AllowAction($SectionID, $ListID) {
		if(AllowSection($SectionID) && AllowList($ListID))
		{
			return true;
		}
		return false;
	}

	function AllowSection($SectionID)
	{
		if (!$SectionID) return false;

		GLOBAL $CURRENTADMIN;
		GLOBAL $TABLEPREFIX;

		if (empty($CURRENTADMIN)) return false;

		if(isset($CURRENTADMIN['Root']) && $CURRENTADMIN['Root'] ==1)
		{
			return true;
		}

		$AdminID = $CURRENTADMIN['AdminID'];

		$result = mysql_query("SELECT COUNT(*) FROM " . $TABLEPREFIX . "allow_functions WHERE AdminID='".addslashes($AdminID)."' AND SectionID='".addslashes($SectionID)."'");

		$count = mysql_result($result, 0, 0);

		if($count > 0)
		{
			return true;
		}
		return false;
	}

	function AllowList($ListID)
	{
		if (!$ListID) return false;

		GLOBAL $CURRENTADMIN;
		GLOBAL $TABLEPREFIX;

		if($CURRENTADMIN['Manager'] == 1)
		{
			return true;
		}

		$AdminID = $CURRENTADMIN['AdminID'];

		$result = mysql_query("SELECT COUNT(*) FROM " . $TABLEPREFIX . "allow_lists WHERE AdminID='".addslashes($AdminID)."' AND ListID='".addslashes($ListID)."'");

		$count = mysql_result($result, 0, 0);

		if($count > 0)
		{
			return true;
		}
		return false;
	}

?>