From c48627cf9ab638b49f43443d1c130d7f809bcf49 Mon Sep 17 00:00:00 2001 From: Daniel Cebrian Date: Fri, 3 May 2024 12:03:21 +0200 Subject: [PATCH] #13603 fixed acl --- .../include/ajax/task_to_perform.php | 5 +++++ .../include/class/WelcomeWindow.class.php | 20 +++++++++++++------ 2 files changed, 19 insertions(+), 6 deletions(-) diff --git a/pandora_console/include/ajax/task_to_perform.php b/pandora_console/include/ajax/task_to_perform.php index 331f1be199..c7a9e1bcca 100644 --- a/pandora_console/include/ajax/task_to_perform.php +++ b/pandora_console/include/ajax/task_to_perform.php @@ -145,6 +145,11 @@ if ($create_net_scan) { } if ($create_mail_alert) { + if ((bool) check_acl($config['id_user'], 0, 'LM') === false) { + ui_print_error_message(__('Unauthorized')); + return; + } + include_once '../functions_alerts.php'; $id_action = db_get_row_filter('talert_actions', ['name' => 'Email to '.$config['id_user']], 'id')['id']; if (!$id_action) { diff --git a/pandora_console/include/class/WelcomeWindow.class.php b/pandora_console/include/class/WelcomeWindow.class.php index 2c37f1150e..5f2efd4f40 100644 --- a/pandora_console/include/class/WelcomeWindow.class.php +++ b/pandora_console/include/class/WelcomeWindow.class.php @@ -610,12 +610,20 @@ class WelcomeWindow extends Wizard ], ]; - $fields['load_demo_data'] = __('Load demo data'); - $fields['wizard_agent'] = __('Agent installation wizard'); - $fields['check_web'] = __('Create WEB monitoring'); - $fields['check_connectivity'] = __('Create network monitoring'); - $fields['check_net'] = __('Discover my network'); - $fields['check_mail_alert'] = __('Create email alert'); + if (users_is_admin() === true) { + $fields['load_demo_data'] = __('Load demo data'); + } + + if ((bool) check_acl($config['id_user'], 0, 'AW') === true) { + $fields['wizard_agent'] = __('Agent installation wizard'); + $fields['check_web'] = __('Create WEB monitoring'); + $fields['check_connectivity'] = __('Create network monitoring'); + $fields['check_net'] = __('Discover my network'); + } + + if ((bool) check_acl($config['id_user'], 0, 'LM') === true) { + $fields['check_mail_alert'] = __('Create email alert'); + } $inputs[] = [ 'wrapper' => 'div',