tyler.durden/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2025-07-27 15:54:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

RoleController: Always perform a permission check

Browse Source 
(cherry picked from commit 965aac11efc6c0ecd6ce3a080451ae1a100b292c)
This commit is contained in:
Johannes Meyer 2022-12-01 15:00:30 +01:00
parent ee43f4a002
commit a82a88a34b
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
application/controllers/RoleController.php
View File

@ -32,6 +32,7 @@ class RoleController extends AuthBackendController
{ {
public function init() public function init()
{ {
$this->assertPermission('config/access-control/roles');
$this->view->title = $this->translate('Roles'); $this->view->title = $this->translate('Roles');
parent::init(); parent::init();
@ -57,7 +58,6 @@ class RoleController extends AuthBackendController
*/ */
public function listAction() public function listAction()
{ {
$this->assertPermission('config/access-control/roles');
$this->createListTabs()->activate('role/list'); $this->createListTabs()->activate('role/list');
$this->view->roles = (new RolesConfig()) $this->view->roles = (new RolesConfig())
->select(); ->select();
@ -82,8 +82,6 @@ class RoleController extends AuthBackendController
*/ */
public function addAction() public function addAction()
{ {
$this->assertPermission('config/access-control/roles');
$role = new RoleForm(); $role = new RoleForm();
$role->setRedirectUrl('__CLOSE__'); $role->setRedirectUrl('__CLOSE__');
$role->setRepository(new RolesConfig()); $role->setRepository(new RolesConfig());
@ -100,8 +98,6 @@ class RoleController extends AuthBackendController
*/ */
public function editAction() public function editAction()
{ {
$this->assertPermission('config/access-control/roles');
$name = $this->params->getRequired('role'); $name = $this->params->getRequired('role');
$role = new RoleForm(); $role = new RoleForm();
$role->setRedirectUrl('__CLOSE__'); $role->setRedirectUrl('__CLOSE__');
@ -123,8 +119,6 @@ class RoleController extends AuthBackendController
*/ */
public function removeAction() public function removeAction()
{ {
$this->assertPermission('config/access-control/roles');
$name = $this->params->getRequired('role'); $name = $this->params->getRequired('role');
$role = new RoleForm(); $role = new RoleForm();
$role->setRedirectUrl('__CLOSE__'); $role->setRedirectUrl('__CLOSE__');
@ -143,7 +137,6 @@ class RoleController extends AuthBackendController
public function auditAction() public function auditAction()
{ {
$this->assertPermission('config/access-control/roles');
$this->createListTabs()->activate('role/audit'); $this->createListTabs()->activate('role/audit');
$this->view->title = t('Audit'); $this->view->title = t('Audit');