tyler.durden/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2025-07-12 08:24:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Don't load module menu entries if the authenticated user lacks the module permission

Browse Source 
refs #9644
This commit is contained in:
Eric Lippmann 2015-07-23 12:59:30 +02:00
parent cccb34e98c
commit a34ad0227f
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
library/Icinga/Web/Menu.php
View File

@ -206,14 +206,15 @@ class Menu implements RecursiveIterator
*/ */
public static function load() public static function load()
{ {
/** @var $menu \Icinga\Web\Menu */
$menu = new static('menu'); $menu = new static('menu');
$menu->addMainMenuItems(); $menu->addMainMenuItems();
$auth = Manager::getInstance();
$manager = Icinga::app()->getModuleManager(); $manager = Icinga::app()->getModuleManager();
foreach ($manager->getLoadedModules() as $module) { foreach ($manager->getLoadedModules() as $module) {
/** @var $module \Icinga\Application\Modules\Module */ if ($auth->hasPermission($manager::MODULE_PERMISSION_NS . $module->getName())) {
$menu->mergeSubMenus($module->getMenuItems()); $menu->mergeSubMenus($module->getMenuItems());
} }
}
return $menu->order(); return $menu->order();
} }