GroupController: Apply permission config/application/groups/show

refs #8826
This commit is contained in:
Johannes Meyer 2015-05-27 10:30:42 +02:00
parent 0e37aad6ce
commit e31c99be1c
2 changed files with 15 additions and 6 deletions

View File

@ -29,6 +29,7 @@ class GroupController extends AuthBackendController
*/
public function listAction()
{
$this->assertPermission('config/application/groups/show');
$backendNames = array_map(
function ($b) { return $b->getName(); },
$this->loadUserGroupBackends('Icinga\Data\Selectable')
@ -86,6 +87,7 @@ class GroupController extends AuthBackendController
*/
public function showAction()
{
$this->assertPermission('config/application/groups/show');
$groupName = $this->params->getRequired('group');
$backend = $this->getUserGroupBackend($this->params->getRequired('backend'));

View File

@ -2,6 +2,7 @@
use Icinga\Data\Updatable;
use Icinga\Data\Reducible;
use Icinga\Data\Selectable;
$editLink = null;
if ($this->hasPermission('config/application/users/edit') && $backend instanceof Updatable) {
@ -52,12 +53,18 @@ if ($this->hasPermission('config/application/users/edit') && $backend instanceof
<tbody>
<?php foreach ($memberships as $membership): ?>
<tr>
<td class="membership-group"><?= $this->qlink($membership->group_name, 'group/show', array(
'backend' => $membership->backend->getName(),
'group' => $membership->group_name
), array(
'title' => sprintf($this->translate('Show detailed information for group %s'), $membership->group_name)
)); ?></td>
<td class="membership-group">
<?php if ($this->hasPermission('config/application/groups/show') && $membership->backend instanceof Selectable): ?>
<?= $this->qlink($membership->group_name, 'group/show', array(
'backend' => $membership->backend->getName(),
'group' => $membership->group_name
), array(
'title' => sprintf($this->translate('Show detailed information for group %s'), $membership->group_name)
)); ?>
<?php else: ?>
<?= $this->escape($membership->group_name); ?>
<?php endif ?>
</td>
<td class="membership-cancel" data-base-target="_self">
<?php if ($membership->backend instanceof Reducible): ?>
<?= $removeForm->setAction($this->url('group/removemember', array(