<?php
if (!defined('W2P_BASE_DIR')) {
	die('You should not access this file directly.');
}

$del = (int) w2PgetParam($_POST, 'del', 0);
$role_id = (int) w2PgetParam($_POST, 'role_id', 0);

$perms = &$AppUI->acl();
if (!canEdit('system')) {
	$AppUI->redirect(ACCESS_DENIED);
}




$obj = &$AppUI->acl();

$AppUI->setMsg('Permission');
if ($del) {
	if ($obj->del_acl($_POST['permission_id'])) {
		$AppUI->setMsg('deleted', UI_MSG_ALERT, true);
		$obj->removeACLPermissions(w2PgetParam($_POST, 'permission_id', null));
	} else {
		$AppUI->setMsg($obj->msg(), UI_MSG_ERROR);
	}
} else {
	if ($obj->addRolePermission()) {
		$AppUI->setMsg('added', UI_MSG_OK, true);
	} else {
		$AppUI->setMsg($obj->msg(), UI_MSG_ERROR);
	}
}
$AppUI->redirect('m=system&u=roles&a=viewrole&role_id=' . $role_id);