fixing a problem with add/remove administrators

Author: twoln

Changes.md

@@ -1,3 +1,7 @@
+Changes in 2.2.1.1-alpha
+- [BUGFIX   #1] - fixed the problem with Add/Remove adminstrotors for institution admins
+- [BUGFIX   #2] - introduce better type-safety for admin API (reported by: Nahit (Github: https://github.com/Dogru-Isim))
+
 Changes in 2.2.1
 =====================
 - [FEATURE  #1]  - added logging of last administrator authentication to help eliminating "dead" accounts

web/admin/inc/manageAdmins.inc.php

@@ -52,9 +52,10 @@
 // either the operation is done by federation operator himself
 $isFedAdmin = $user->isFederationAdmin($my_inst->federation);
 // or an admin of the IdP with federation admin blessings
+$is_admin_with_blessing = $my_inst->isPrimaryOwner($_SESSION['user']);
 
 if (isset($_SESSION['entitledIdPs']) && in_array($my_inst->identifier, $_SESSION['entitledIdPs'])) {
-    $is_admin_with_blessing = true;
+        $is_admin_with_blessing = true;
 }
 
 if (isset($_SESSION['resyncedIdPs']) && in_array($my_inst->identifier, $_SESSION['resyncedIdPs'])) {