monitoring/security: Add missing permission checks of command actions

modules/monitoring/application/controllers/HostsController.php

@@ -169,6 +169,8 @@ class Monitoring_HostsController extends Controller
      */
     public function acknowledgeProblemAction()
     {
+        $this->assertPermission('monitoring/command/acknowledge-problem');
+
         $this->view->title = $this->translate('Acknowledge Host Problems');
         $this->handleCommandForm(new AcknowledgeProblemCommandForm());
     }
@@ -178,6 +180,8 @@ class Monitoring_HostsController extends Controller
      */
     public function rescheduleCheckAction()
     {
+        $this->assertPermission('monitoring/command/schedule-check');
+
         $this->view->title = $this->translate('Reschedule Host Checks');
         $this->handleCommandForm(new ScheduleHostCheckCommandForm());
     }
@@ -187,6 +191,8 @@ class Monitoring_HostsController extends Controller
      */
     public function scheduleDowntimeAction()
     {
+        $this->assertPermission('monitoring/command/downtime/schedule');
+
         $this->view->title = $this->translate('Schedule Host Downtimes');
         $this->handleCommandForm(new ScheduleHostDowntimeCommandForm());
     }
@@ -196,6 +202,8 @@ class Monitoring_HostsController extends Controller
      */
     public function processCheckResultAction()
     {
+        $this->assertPermission('monitoring/command/process-check-result');
+
         $this->view->title = $this->translate('Submit Passive Host Check Results');
         $this->handleCommandForm(new ProcessCheckResultCommandForm());
     }

modules/monitoring/application/controllers/ServicesController.php

@@ -218,6 +218,8 @@ class Monitoring_ServicesController extends Controller
      */
     public function acknowledgeProblemAction()
     {
+        $this->assertPermission('monitoring/command/acknowledge-problem');
+
         $this->view->title = $this->translate('Acknowledge Service Problems');
         $this->handleCommandForm(new AcknowledgeProblemCommandForm());
     }
@@ -227,6 +229,8 @@ class Monitoring_ServicesController extends Controller
      */
     public function rescheduleCheckAction()
     {
+        $this->assertPermission('monitoring/command/schedule-check');
+
         $this->view->title = $this->translate('Reschedule Service Checks');
         $this->handleCommandForm(new ScheduleServiceCheckCommandForm());
     }
@@ -236,6 +240,8 @@ class Monitoring_ServicesController extends Controller
      */
     public function scheduleDowntimeAction()
     {
+        $this->assertPermission('monitoring/command/downtime/schedule');
+
         $this->view->title = $this->translate('Schedule Service Downtimes');
         $this->handleCommandForm(new ScheduleServiceDowntimeCommandForm());
     }
@@ -245,6 +251,8 @@ class Monitoring_ServicesController extends Controller
      */
     public function processCheckResultAction()
     {
+        $this->assertPermission('monitoring/command/process-check-result');
+
         $this->view->title = $this->translate('Submit Passive Service Check Results');
         $this->handleCommandForm(new ProcessCheckResultCommandForm());
     }

modules/monitoring/library/Monitoring/Web/Controller/MonitoredObjectController.php

@@ -142,6 +142,7 @@ abstract class MonitoredObjectController extends Controller
     public function deleteCommentAction()
     {
         $this->assertHttpMethod('POST');
+        $this->assertPermission('monitoring/command/comment/delete');
         $this->handleCommandForm(new DeleteCommentCommandForm());
     }