MID-5981 hide shopping-cart icon when user has no authorization

Evolveum · Apr 14, 2020 · f449992 · f449992
1 parent c4e60a6
commit f449992
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/api/page/PageBase.java b/gui/admin-gui/src/main/java/com/evolveum/midpoint/gui/api/page/PageBase.java
@@ -924,7 +924,7 @@ public void onClick(AjaxRequestTarget ajaxRequestTarget) {
             }
         };
         cartButton.setOutputMarkupId(true);
-        cartButton.add(createUserStatusBehaviour(true));
+        cartButton.add(getShoppingCartVisibleBehavior());
         mainHeader.add(cartButton);
 
         Label cartItemsCount = new Label(ID_CART_ITEMS_COUNT, new LoadableModel<String>(true) {
@@ -1197,6 +1197,18 @@ public void hideMainPopup(AjaxRequestTarget target) {
         getMainPopup().close(target);
     }
 
+    private VisibleEnableBehaviour getShoppingCartVisibleBehavior(){
+        return new VisibleEnableBehaviour() {
+            private static final long serialVersionUID = 1L;
+
+            @Override
+            public boolean isVisible() {
+                return !isErrorPage() && isSideMenuVisible(true) &&
+                        (WebComponentUtil.isAuthorized(AuthorizationConstants.AUTZ_UI_SELF_REQUESTS_ASSIGNMENTS_URL, PageSelf.AUTH_SELF_ALL_URI));
+            }
+        };
+    }
+
     private VisibleEnableBehaviour createUserStatusBehaviour(final boolean visibleIfLoggedIn) {
         return new VisibleEnableBehaviour() {
             private static final long serialVersionUID = 1L;