Dev: Disable textarea if user lacks permission

LimeSurvey · Feb 5, 2018 · 82f6e69 · Shnoulle · Feb 5, 2018 · olleharstedt
1 parent 6841bff
commit 82f6e69
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/application/controllers/admin/questions.php b/application/controllers/admin/questions.php
@@ -397,6 +397,10 @@ public function editdefaultvalues($surveyid, $gid, $qid)
         $aData['sidemenu']['explorer']['state'] = true;
         $aData['sidemenu']['explorer']['gid'] = (isset($gid)) ? $gid : false;
         $aData['sidemenu']['explorer']['qid'] = (isset($qid)) ? $qid : false;
+        $aData['hasUpdatePermission'] =
+            Permission::model()->hasSurveyPermission($iSurveyID, 'surveycontent', 'update') ?
+            '' :
+            'disabled="disabled" readonly="readonly"';
 
         $this->_renderWrappedTemplate('survey/Question', 'editdefaultvalues_view', $aData);
     }

diff --git a/application/views/admin/survey/Question/editdefaultvalues_view.php b/application/views/admin/survey/Question/editdefaultvalues_view.php
@@ -157,9 +157,10 @@
                                                         <?php eT("Default value:")?>
                                                     </label>
                                                     <div class="col-sm-12">
-                                                        <textarea cols='50' name='defaultanswerscale_<?php echo "0_{$language}_0" ?>'
+                                                        <textarea <?php echo $hasUpdatePermission; ?> cols='50' name='defaultanswerscale_<?php echo "0_{$language}_0" ?>'
                                                             id='defaultanswerscale_<?php echo "0_{$language}_0" ?>'><?php
-                                                            echo htmlspecialchars($langopts[$language][$questionrow['type']][0]); ?></textarea>
+                                                            echo htmlspecialchars($langopts[$language][$questionrow['type']][0]); ?>
+                                                        </textarea>
                                                     </div>
                                                 </div>
                                             <?php endif;  //temporary solution?>