tyler.durden/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2025-04-08 17:15:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

RoleController: Always perform a permission check

Browse Source 
(cherry picked from commit 965aac11efc6c0ecd6ce3a080451ae1a100b292c)
This commit is contained in:
Johannes Meyer 2022-12-01 15:00:30 +01:00
parent 23aab976dc
commit 94f70a6c19
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
application/controllers/RoleController.php
View File

@ -31,6 +31,7 @@ class RoleController extends AuthBackendController
{
public function init()
{
$this->assertPermission('config/access-control/roles');
$this->view->title = $this->translate('Roles');
parent::init();
@ -56,7 +57,6 @@ class RoleController extends AuthBackendController
*/
public function listAction()
{
$this->assertPermission('config/access-control/roles');
$this->createListTabs()->activate('role/list');
$this->view->roles = (new RolesConfig())
->select();
@ -81,8 +81,6 @@ class RoleController extends AuthBackendController
*/
public function addAction()
{
$this->assertPermission('config/access-control/roles');
$role = new RoleForm();
$role->setRedirectUrl('__CLOSE__');
$role->setRepository(new RolesConfig());
@ -99,8 +97,6 @@ class RoleController extends AuthBackendController
*/
public function editAction()
{
$this->assertPermission('config/access-control/roles');
$name = $this->params->getRequired('role');
$role = new RoleForm();
$role->setRedirectUrl('__CLOSE__');
@ -122,8 +118,6 @@ class RoleController extends AuthBackendController
*/
public function removeAction()
{
$this->assertPermission('config/access-control/roles');
$name = $this->params->getRequired('role');
$role = new RoleForm();
$role->setRedirectUrl('__CLOSE__');
@ -142,7 +136,6 @@ class RoleController extends AuthBackendController
public function auditAction()
{
$this->assertPermission('config/access-control/roles');
$this->createListTabs()->activate('role/audit');
$this->view->title = t('Audit');