Merge pull request #6566 from dmarcoux/check-permissions-to-remove-gr…

…oup-members Check permissions to remove group members
openSUSE · Dec 11, 2018 · aa96047 · aa96047
2 parents b60837a + 139d95b
commit aa96047
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/src/api/app/views/webui2/shared/_group_members_table.html.haml b/src/api/app/views/webui2/shared/_group_members_table.html.haml
@@ -10,9 +10,10 @@
           %tr
             %td= link_to(user, user_show_path(user))
             %td.text-nowrap
-              = link_to('#', data: { toggle: 'modal', target: "#delete-group-user-#{user.id}-modal" }) do
-                %i.fas.fa-times-circle.text-danger{ title: "Remove user '#{user}' from '#{group}' group." }
-              = render(partial: 'remove_user_modal', locals: { group: group, user: user })
+              - if policy(group).update?
+                = link_to('#', data: { toggle: 'modal', target: "#delete-group-user-#{user.id}-modal" }) do
+                  %i.fas.fa-times-circle.text-danger{ title: "Remove user '#{user}' from '#{group}' group." }
+                = render(partial: 'remove_user_modal', locals: { group: group, user: user })
       - else
         %tr
           %td{ colspan: 2 } This group does not contain users.