From 08e8d5d74236c892622eb82447d0c58ebffc411d Mon Sep 17 00:00:00 2001
From: Eric Lippmann <eric.lippmann@netways.de>
Date: Fri, 23 Jan 2015 10:48:21 +0100
Subject: [PATCH] monitoring/security: Hide 'Process check result' link if user
 lacks the respective permission

---
 .../scripts/show/components/command.phtml     | 43 +++++++++++--------
 1 file changed, 25 insertions(+), 18 deletions(-)

diff --git a/modules/monitoring/application/views/scripts/show/components/command.phtml b/modules/monitoring/application/views/scripts/show/components/command.phtml
index dd8996d58..5239dad41 100644
--- a/modules/monitoring/application/views/scripts/show/components/command.phtml
+++ b/modules/monitoring/application/views/scripts/show/components/command.phtml
@@ -3,25 +3,32 @@
 $parts = explode('!', $object->check_command);
 $command = array_shift($parts);
 
-?><tr class="newsection">
-  <th><?= $this->translate('Command') ?></th>
-  <td>
-    <?= $this->escape($command) ?>
-  <?php if ($object->passive_checks_enabled): ?>
-   <?php if ($object->getType() === $object::TYPE_HOST): ?>
-    <a href="<?= $this->href(
-      'monitoring/host/process-check-result',
-      array('host' => $object->getName())
-    ); ?>"><?= $this->icon('reply'); ?> <?= $this->translate('Process check result'); ?></a>
-   <?php else: ?>
-    <a href="<?= $this->href(
-      'monitoring/service/process-check-result',
-      array('host' => $object->getHost()->getName(), 'service' => $object->getName())
-    ); ?>"><?= $this->icon('reply'); ?> <?= $this->translate('Process check result'); ?></a>
-   <?php endif ?>
-  <?php endif ?>
-  </td>
+?>
+
+<tr class="newsection">
+    <th><?= $this->translate('Command') ?></th>
+    <td>
+        <?= $this->escape($command) ?>
+        <?php if ($this->hasPermission('monitoring/command/schedule-check') && $object->passive_checks_enabled): ?>
+            <?php if ($object->getType() === $object::TYPE_HOST) {
+                $processCheckResult = $this->href(
+                    'monitoring/host/process-check-result',
+                    array('host' => $object->getName())
+                );
+            } else {
+                $processCheckResult = $this->href(
+                    'monitoring/service/process-check-result',
+                    array('host' => $object->getHost()->getName(), 'service' => $object->getName())
+                );
+            } ?>
+            <a href="<?= $processCheckResult ?>">
+                <?= $this->icon('reply') ?>
+                <?= $this->translate('Process check result') ?>
+            </a>
+        <?php endif ?>
+    </td>
 </tr>
+
 <?php
 
 $row = "<tr>\n  <th>%s</th>\n  <td>%s</td>\n</tr>\n";