Index: openacs-4/packages/acs-templating/tcl/richtext-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-templating/tcl/richtext-procs.tcl,v diff -u -r1.27 -r1.28 --- openacs-4/packages/acs-templating/tcl/richtext-procs.tcl 2 Feb 2007 19:49:23 -0000 1.27 +++ openacs-4/packages/acs-templating/tcl/richtext-procs.tcl 26 Feb 2007 10:07:51 -0000 1.28 @@ -83,6 +83,17 @@ # enhanced text and HTML needs to be security checked if { [lsearch { text/enhanced text/html } $format] != -1 } { + + # don't check, if user is side-wide admin or a package admin + # -gustaf neumann + if {[acs_user::site_wide_admin_p] || + ([ns_conn isconnected] + && [ad_conn user_id] != 0 + && [permission::permission_p -object_id [ad_conn package_id] -privilege admin \ + -party_id [ad_conn user_id]])} { + return 1 + } + set check_result [ad_html_security_check $contents] if { $check_result ne "" } { set message $check_result