upstream/icingaweb2-module-businessprocess
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2-module-businessprocess.git synced 2025-12-29 18:19:33 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ProcessController: add missing permission checks

Browse source 
refs #107
This commit is contained in:
Thomas Gelf 2017-02-08 17:39:22 +01:00
parent a2ba17999b
commit e6722d9024
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
application/controllers/ProcessController.php
View file

@ -56,6 +56,8 @@ class ProcessController extends Controller
*/
public function uploadAction()
{
$this->assertPermission('businessprocess/create');
$title = $this->translate('Upload a Business Process Config file');
$this->setTitle($title);
$this->controls()
@ -308,6 +310,8 @@ class ProcessController extends Controller
*/
public function sourceAction()
{
$this->assertPermission('businessprocess/modify');
$bp = $this->loadModifiedBpConfig();
$this->view->showDiff = $showDiff = (bool) $this->params->get('showDiff', false);
@ -342,6 +346,8 @@ class ProcessController extends Controller
*/
public function downloadAction()
{
$this->assertPermission('businessprocess/modify');
$config = $this->loadModifiedBpConfig();
$response = $this->getResponse();
$response->setHeader(
@ -362,6 +368,8 @@ class ProcessController extends Controller
*/
public function configAction()
{
$this->assertPermission('businessprocess/modify');
$bp = $this->loadModifiedBpConfig();
$title = sprintf(