From 0b7377238a556708035b0cd51a9e58693fb648f6 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Sun, 14 Feb 2021 15:50:46 +0300
Subject: [PATCH] add Handler_Administrative

---
 classes/handler/administrative.php | 11 +++++++++++
 classes/pref/system.php            | 13 +------------
 classes/pref/users.php             | 13 +------------
 3 files changed, 13 insertions(+), 24 deletions(-)
 create mode 100644 classes/handler/administrative.php

diff --git a/classes/handler/administrative.php b/classes/handler/administrative.php
new file mode 100644
index 000000000..52dfed8b7
--- /dev/null
+++ b/classes/handler/administrative.php
@@ -0,0 +1,11 @@
+<?php
+class Handler_Administrative extends Handler_Protected {
+   function before($method) {
+      if (parent::before($method)) {
+         if (($_SESSION["access_level"] ?? 0) >= 10) {
+            return true;
+         }
+      }
+      return false;
+   }
+}
diff --git a/classes/pref/system.php b/classes/pref/system.php
index 14df6f8d1..2a97ec6f0 100644
--- a/classes/pref/system.php
+++ b/classes/pref/system.php
@@ -1,20 +1,9 @@
 <?php
 
-class Pref_System extends Handler_Protected {
+class Pref_System extends Handler_Administrative {
 
 	private $log_page_limit = 15;
 
-	function before($method) {
-		if (parent::before($method)) {
-			if ($_SESSION["access_level"] < 10) {
-				print __("Your access level is insufficient to open this tab.");
-				return false;
-			}
-			return true;
-		}
-		return false;
-	}
-
 	function csrf_ignore($method) {
 		$csrf_ignored = array("index");
 
diff --git a/classes/pref/users.php b/classes/pref/users.php
index 9d9ea4d8e..b34f85d88 100644
--- a/classes/pref/users.php
+++ b/classes/pref/users.php
@@ -1,16 +1,5 @@
 <?php
-class Pref_Users extends Handler_Protected {
-		function before($method) {
-			if (parent::before($method)) {
-				if ($_SESSION["access_level"] < 10) {
-					print __("Your access level is insufficient to open this tab.");
-					return false;
-				}
-				return true;
-			}
-			return false;
-		}
-
+class Pref_Users extends Handler_Administrative {
 		function csrf_ignore($method) {
 			$csrf_ignored = array("index", "userdetails");