From 2cbea558effd29ba7318747adab2b5f6d9ee750c Mon Sep 17 00:00:00 2001
From: Johannes Meyer <johannes.meyer@netways.de>
Date: Wed, 27 May 2015 10:23:59 +0200
Subject: [PATCH] UserController: Apply permission
 config/application/users/show

refs #8826
---
 application/controllers/UserController.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/application/controllers/UserController.php b/application/controllers/UserController.php
index 788ee7708..571cc633e 100644
--- a/application/controllers/UserController.php
+++ b/application/controllers/UserController.php
@@ -29,6 +29,7 @@ class UserController extends AuthBackendController
      */
     public function listAction()
     {
+        $this->assertPermission('config/application/users/show');
         $backendNames = array_map(
             function ($b) { return $b->getName(); },
             $this->loadUserBackends('Icinga\Data\Selectable')
@@ -86,6 +87,7 @@ class UserController extends AuthBackendController
      */
     public function showAction()
     {
+        $this->assertPermission('config/application/users/show');
         $userName = $this->params->getRequired('user');
         $backend = $this->getUserBackend($this->params->getRequired('backend'));