GroupController: Apply permission config/application/groups/member/add

refs #8826
Icinga · May 27, 2015 · 1517c72 · 1517c72
1 parent 0c9bac0
commit 1517c72
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/application/controllers/GroupController.php b/application/controllers/GroupController.php
@@ -228,6 +228,7 @@ public function removeAction()
      */
     public function addmemberAction()
     {
+        $this->assertPermission('config/application/groups/member/add');
         $groupName = $this->params->getRequired('group');
         $backend = $this->getUserGroupBackend($this->params->getRequired('backend'), 'Icinga\Data\Extensible');
 

diff --git a/application/controllers/UserController.php b/application/controllers/UserController.php
@@ -120,8 +120,12 @@ public function showAction()
             $memberships
         );
 
-        $extensibleBackends = $this->loadUserGroupBackends('Icinga\Data\Extensible');
-        $this->view->showCreateMembershipLink = ! empty($extensibleBackends);
+        if ($this->hasPermission('config/application/groups/member/add')) {
+            $extensibleBackends = $this->loadUserGroupBackends('Icinga\Data\Extensible');
+            $this->view->showCreateMembershipLink = ! empty($extensibleBackends);
+        } else {
+            $this->view->showCreateMembershipLink = false;
+        }
 
         $this->view->user = $user;
         $this->view->backend = $backend;
@@ -220,6 +224,7 @@ public function removeAction()
      */
     public function createmembershipAction()
     {
+        $this->assertPermission('config/application/groups/member/add');
         $userName = $this->params->getRequired('user');
         $backend = $this->getUserBackend($this->params->getRequired('backend'));