tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

monitoring/security: Hide 'Add comment' link if user lacks the respective permission

This commit is contained in:
Eric Lippmann 2015-01-23 09:41:06 +01:00
parent cd8822ceff
commit 67be1b329b
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
modules/monitoring/application/views/scripts/show/components/comments.phtml
View File

@ -3,7 +3,7 @@
<td>
<?php
/** @var \Icinga\Module\Monitoring\Object\MonitoredObject $object */
/** @type \Icinga\Module\Monitoring\Object\MonitoredObject $object */
if ($object->getType() === $object::TYPE_HOST) {
$addCommentLink = $this->href(
@ -18,9 +18,15 @@
}
?>
<?php if ($this->hasPermission('monitoring/command/comment/add')): ?>
<a href="<?= $addCommentLink ?>">
<?= $this->icon('comment') ?> <?= $this->translate('Add comment') ?>
<?= $this->icon('comment') ?>
<?= $this->translate('Add comment') ?>
</a>
<?php else: ?>
<?= '&#45;' ?>
<?php endif ?>
</td>
</tr>
@ -43,9 +49,9 @@ foreach ($object->comments as $comment) {
<tr>
<td style="vertical-align: top;" data-base-target="_self">
<?php if (isset($delCommentForm)) { // Form is unset if the current user lacks the respective permission
$form = clone $delCommentForm;
$form->populate(array('comment_id' => $comment->id));
echo $form;
$delCommentForm = clone $delCommentForm;
$delCommentForm->populate(array('comment_id' => $comment->id));
echo $delCommentForm;
} ?>
(<?= ucfirst($comment->type) ?>):
</td>