GroupController: Apply permission config/application/groups/member/remove

refs #8826
This commit is contained in:
Johannes Meyer 2015-05-27 10:38:02 +02:00
parent 1517c72be1
commit d157dec13b
3 changed files with 29 additions and 26 deletions

View File

@ -130,7 +130,7 @@ class GroupController extends AuthBackendController
$this->view->members = $members; $this->view->members = $members;
$this->createShowTabs($backend->getName(), $groupName)->activate('group/show'); $this->createShowTabs($backend->getName(), $groupName)->activate('group/show');
if ($this->hasPermission('config/application/groups/remove') && $backend instanceof Reducible) { if ($this->hasPermission('config/application/groups/member/remove') && $backend instanceof Reducible) {
$removeForm = new Form(); $removeForm = new Form();
$removeForm->setUidDisabled(); $removeForm->setUidDisabled();
$removeForm->setAction( $removeForm->setAction(
@ -255,6 +255,7 @@ class GroupController extends AuthBackendController
*/ */
public function removememberAction() public function removememberAction()
{ {
$this->assertPermission('config/application/groups/member/remove');
$this->assertHttpMethod('POST'); $this->assertHttpMethod('POST');
$groupName = $this->params->getRequired('group'); $groupName = $this->params->getRequired('group');
$backend = $this->getUserGroupBackend($this->params->getRequired('backend'), 'Icinga\Data\Reducible'); $backend = $this->getUserGroupBackend($this->params->getRequired('backend'), 'Icinga\Data\Reducible');

View File

@ -132,6 +132,7 @@ class UserController extends AuthBackendController
$this->view->memberships = $memberships; $this->view->memberships = $memberships;
$this->createShowTabs($backend->getName(), $userName)->activate('user/show'); $this->createShowTabs($backend->getName(), $userName)->activate('user/show');
if ($this->hasPermission('config/application/groups/member/remove')) {
$removeForm = new Form(); $removeForm = new Form();
$removeForm->setUidDisabled(); $removeForm->setUidDisabled();
$removeForm->addElement('hidden', 'user_name', array( $removeForm->addElement('hidden', 'user_name', array(
@ -157,6 +158,7 @@ class UserController extends AuthBackendController
)); ));
$this->view->removeForm = $removeForm; $this->view->removeForm = $removeForm;
} }
}
/** /**
* Add a user * Add a user

View File

@ -66,7 +66,7 @@ if ($this->hasPermission('config/application/users/edit') && $backend instanceof
<?php endif ?> <?php endif ?>
</td> </td>
<td class="membership-cancel" data-base-target="_self"> <td class="membership-cancel" data-base-target="_self">
<?php if ($membership->backend instanceof Reducible): ?> <?php if (isset($removeForm) && $membership->backend instanceof Reducible): ?>
<?= $removeForm->setAction($this->url('group/removemember', array( <?= $removeForm->setAction($this->url('group/removemember', array(
'backend' => $membership->backend->getName(), 'backend' => $membership->backend->getName(),
'group' => $membership->group_name 'group' => $membership->group_name