FPBX211 delete permissions

--- /var/www/html/admin/modules/core/page.ampusers.php  2013-06-20 18:48:50.000000000 -0400
+++ /var/www/html/admin/modules/core/page.ampusers.php  2013-06-20 18:25:41.000000000 -0400
@@ -251,6 +251,11 @@
                if (in_array("999", $sections)) echo " SELECTED";
                echo ">".(($amp_conf['AMPEXTENSIONS'] == 'deviceanduser')?_("Add Device"):_("Add Extension"))."</option>\n";

+               // Delete extensions
+               echo "<option value=\"9999\"";
+               if (in_array("9999", $sections)) echo " SELECTED";
+               echo ">".(($amp_conf['AMPEXTENSIONS'] == 'deviceanduser')?_("Delete Device"):_("Delete Extension"))."</option>\n";
+
                // All Sections
                echo "<option value=\"*\"";
                if (in_array("*", $sections)) echo " SELECTED";
--- /var/www/html/admin/modules/core/functions.inc.php  2013-06-20 18:48:35.000000000 -0400
+++ /var/www/html/admin/modules/core/functions.inc.php  2013-06-20 18:48:23.000000000 -0400
@@ -6944,10 +6944,11 @@
            if ( $display == 'extensions' ) {
                $currentcomponent->addguielem('_top', new gui_pageheading('title', _("Extension").": $extdisplay", false), 0);
                if (!isset($GLOBALS['abort']) || $GLOBALS['abort'] !== true) {
-                   $tlabel = sprintf(_("Delete Extension %s"),$extdisplay);
-                   $label = '<span><img width="16" height="16" border="0" title="'.$tlabel.'" alt="" src="images/user_delete.png"/>&nbsp;'.$tlabel.'</span>';
-                   $currentcomponent->addguielem('_top', new gui_link('del', $label, $delURL, true, false), 0);
-
+                   if ($_SESSION["AMP_user"]->checkSection('9999')) {
+                       $tlabel = sprintf(_("Delete Extension %s"),$extdisplay);
+                       $label = '<span><img width="16" height="16" border="0" title="'.$tlabel.'" alt="" src="images/user_delete.png"/>&nbsp;'.$tlabel.'</span>';
+                       $currentcomponent->addguielem('_top', new gui_link('del', $label, $delURL, true, false), 0);
+                   }
                    $usage_list = framework_display_destination_usage(core_getdest($extdisplay));
                    if (!empty($usage_list)) {
                        $currentcomponent->addguielem('_top', new gui_link_label('dests', $usage_list['text'], $usage_list['tooltip'], true), 0);
@@ -6956,10 +6957,11 @@
            } else {
                $currentcomponent->addguielem('_top', new gui_pageheading('title', _("User").": $extdisplay", false), 0);
                if (!isset($GLOBALS['abort']) || $GLOBALS['abort'] !== true) {
-                   $tlabel = sprintf(_("Delete User %s"),$extdisplay);
-                   $label = '<span><img width="16" height="16" border="0" title="'.$tlabel.'" alt="" src="images/user_delete.png"/>&nbsp;'.$tlabel.'</span>';
-                   $currentcomponent->addguielem('_top', new gui_link('del', $label, $delURL, true, false), 0);
-
+                   if ($_SESSION["AMP_user"]->checkSection('9999')) {
+                       $tlabel = sprintf(_("Delete User %s"),$extdisplay);
+                       $label = '<span><img width="16" height="16" border="0" title="'.$tlabel.'" alt="" src="images/user_delete.png"/>&nbsp;'.$tlabel.'</span>';
+                       $currentcomponent->addguielem('_top', new gui_link('del', $label, $delURL, true, false), 0);
+                   }
                    $usage_list = framework_display_destination_usage(core_getdest($extdisplay));
                    if (!empty($usage_list)) {
                        $currentcomponent->addguielem('_top', new gui_link_label('dests', $usage_list['text'], $usage_list['tooltip'], true), 0);
@@ -7216,12 +7218,14 @@
                }
            break;
            case "del":
-               core_users_del($extdisplay);
-               core_users_cleanastdb($extdisplay);
-               if (function_exists('findmefollow_del')) {
-                   findmefollow_del($extdisplay);
+               if ($_SESSION["AMP_user"]->checkSection('9999')) {
+                   core_users_del($extdisplay);
+                   core_users_cleanastdb($extdisplay);
+                   if (function_exists('findmefollow_del')) {
+                       findmefollow_del($extdisplay);
+                   }
+                   needreload();
                }
-               needreload();
                redirect_standard_continue();
            break;
            case "edit":
@@ -7613,11 +7617,12 @@
            if ( $display != 'extensions' ) {
                $currentcomponent->addguielem('_top', new gui_pageheading('title', _("Device").": $extdisplay", false), 0);

-               $delURL = $_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'].'&action=del';
-               $tlabel = sprintf(_("Delete Device %s"),$extdisplay);
-               $label = '<span><img width="16" height="16" border="0" title="'.$tlabel.'" alt="" src="images/telephone_delete.png"/>&nbsp;'.$tlabel.'</span>';
-               $currentcomponent->addguielem('_top', new gui_link('del', $label, $delURL, true, false), 0);
-
+               if ($_SESSION["AMP_user"]->checkSection('9999')) {
+                   $delURL = $_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'].'&action=del';
+                   $tlabel = sprintf(_("Delete Device %s"),$extdisplay);
+                   $label = '<span><img width="16" height="16" border="0" title="'.$tlabel.'" alt="" src="images/telephone_delete.png"/>&nbsp;'.$tlabel.'</span>';
+                   $currentcomponent->addguielem('_top', new gui_link('del', $label, $delURL, true, false), 0);
+               }
                if ($deviceInfo['device_user'] != 'none') {
                    $editURL = $_SERVER['PHP_SELF'].'?display=users&skip=0&extdisplay='.$deviceInfo['user'];
                    $tlabel =  $deviceInfo['devicetype'] == 'adhoc' ? sprintf(_("Edit Default User: %s"),$deviceInfo['user']) : sprintf(_("Edit Fixed User: %s"),$deviceInfo['user']);
@@ -7764,8 +7769,10 @@
        }
        break;
        case "del":
-           core_devices_del($extdisplay);
-           needreload();
+           if ($_SESSION["AMP_user"]->checkSection('9999')) {
+               core_devices_del($extdisplay);
+               needreload();
+           }
            redirect_standard_continue();
        break;
        case "edit":  //just delete and re-add