NavigationController: Show module item types only if accessible by th…

…e user refs #5600
Icinga · Sep 21, 2015 · 5a494b3 · 5a494b3
1 parent 5f998eb
commit 5a494b3
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/application/controllers/NavigationController.php b/application/controllers/NavigationController.php
@@ -47,11 +47,15 @@ public function init()
      */
     protected function listItemTypes()
     {
+        $moduleManager = Icinga::app()->getModuleManager();
+
         $types = $this->defaultItemTypes;
-        foreach (Icinga::app()->getModuleManager()->getLoadedModules() as $module) {
-            $moduleTypes = $module->getNavigationItems();
-            if (! empty($moduleTypes)) {
-                $types = array_merge($types, $moduleTypes);
+        foreach ($moduleManager->getLoadedModules() as $module) {
+            if ($this->hasPermission($moduleManager::MODULE_PERMISSION_NS . $module->getName())) {
+                $moduleTypes = $module->getNavigationItems();
+                if (! empty($moduleTypes)) {
+                    $types = array_merge($types, $moduleTypes);
+                }
             }
         }