tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

RoleController: Always perform a permission check

This commit is contained in:
Johannes Meyer 2022-12-01 15:00:30 +01:00
parent ec7fb82a94
commit 965aac11ef
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
application/controllers/RoleController.php
View File

@ -32,6 +32,7 @@ class RoleController extends AuthBackendController
{
public function init()
{
$this->assertPermission('config/access-control/roles');
$this->view->title = $this->translate('Roles');
parent::init();
@ -57,7 +58,6 @@ class RoleController extends AuthBackendController
*/
public function listAction()
{
$this->assertPermission('config/access-control/roles');
$this->createListTabs()->activate('role/list');
$this->view->roles = (new RolesConfig())
->select();
@ -82,8 +82,6 @@ class RoleController extends AuthBackendController
*/
public function addAction()
{
$this->assertPermission('config/access-control/roles');
$role = new RoleForm();
$role->setRedirectUrl('__CLOSE__');
$role->setRepository(new RolesConfig());
@ -100,8 +98,6 @@ class RoleController extends AuthBackendController
*/
public function editAction()
{
$this->assertPermission('config/access-control/roles');
$name = $this->params->getRequired('role');
$role = new RoleForm();
$role->setRedirectUrl('__CLOSE__');
@ -123,8 +119,6 @@ class RoleController extends AuthBackendController
*/
public function removeAction()
{
$this->assertPermission('config/access-control/roles');
$name = $this->params->getRequired('role');
$role = new RoleForm();
$role->setRedirectUrl('__CLOSE__');
@ -143,7 +137,6 @@ class RoleController extends AuthBackendController
public function auditAction()
{
$this->assertPermission('config/access-control/roles');
$this->createListTabs()->activate('role/audit');
$this->view->title = t('Audit');