Rechte in Controller eingepflanzt

1 files changed, 14 insertions, 21 deletions

diff --git a/application/modules/user/controllers/BootisoController.php b/application/modules/user/controllers/BootisoController.php
index a6fbe9e..84d51ab 100644
--- a/application/modules/user/controllers/BootisoController.php
+++ b/application/modules/user/controllers/BootisoController.php
@@ -58,8 +58,8 @@ class user_BootisoController extends Zend_Controller_Action
     	
     	$groupID = $this->membership->getGroupID();    	
     	
-    	//TODO ACL Darf er BootISOMenu sehen?
-    	if(false)
+    	//ACL Darf er BootISOMenu sehen?
+    	if(!Pbs_Acl::checkRight('bai') && !Pbs_Acl::checkRight('bui'))
     		$this->_redirect('/user/index');
 
     	$groupgroupsMapper = new Application_Model_GroupGroupsMapper();
@@ -91,9 +91,8 @@ class user_BootisoController extends Zend_Controller_Action
 		$this->view->pagination = $pagination->pagination($pageurl);
 		$this->view->page 		= $pagination->getRequestPage();
 		$this->view->bootisolist= $this->view->bootisolist; 	
- 	
-    	
-    	
+
+		
     	$prebootMapper = new Application_Model_PreBootMapper(); 
        	$this->view->prebootlist = array();
 
@@ -112,8 +111,8 @@ class user_BootisoController extends Zend_Controller_Action
 		
 		
 		
-		//TODO ACL Darf er BootISOs downloaden?
-		if(false)
+		//ACL Darf er BootISOs downloaden?
+		if(!Pbs_Acl::checkRight('bdld'))
     		$this->_redirect('/user/bootiso/index/page/'.$this->page.'/downloadresult/forbidden');
 		
     	$prebootID = $this->_request->getParam('prebootID');
@@ -145,8 +144,8 @@ class user_BootisoController extends Zend_Controller_Action
 
     public function createbootisoAction()
     {
-    		//TODO ACL Darf er BootISOs erstellen?
-    		if(false)
+    		//ACL Darf er BootISOs erstellen?
+    		if(!Pbs_Acl::checkRight('bc'))
     			$this->_redirect('/user/bootiso/index/page/'.$this->page.'/addresult/forbidden');
 
     		$groupgroupsMapper = new Application_Model_GroupGroupsMapper();
@@ -162,7 +161,6 @@ class user_BootisoController extends Zend_Controller_Action
     	        							'action' => 'createbootiso',
     	        							'prebootlist' => $prebootlist, 
     	        							'groupdepth' => $childgroups, 
-    	        							'rights' => null,
     	        							'page'=>$this->page));
     		} else {
     			
@@ -170,14 +168,12 @@ class user_BootisoController extends Zend_Controller_Action
     	        							'action' => 'createbootiso',
     	        							'prebootlist' => $prebootlist, 
     	        							'groupdepth' => $childgroups, 
-    	        							'rights' => null,
     	        							'page'=>$this->page),$_POST);
     			    			
     		    if ($bootisoForm->isValid($_POST)) {
 
     		    	$bootiso = new Application_Model_BootIso($_POST);
     		    	
-    		    	$bootiso->setMembershipID($this->membership->getID());
     		    	$bootiso->setGroupID($this->membership->getGroupID());    	
     		        $bootiso->setCreated(time()); 
     		        
@@ -213,8 +209,8 @@ class user_BootisoController extends Zend_Controller_Action
 
     public function editbootisoAction()
     {
-    	//TODO ACL Darf er BootISOs editieren?
-    	if(false)
+    	//ACL Darf er BootISOs editieren?
+    	if(!Pbs_Acl::checkRight('be'))
     		$this->_redirect('/user/bootiso/index/page/'.$this->page.'/modifyresult/forbidden');
     	
     	$bootisoID = $this->_request->getParam('bootisoID'); 
@@ -241,7 +237,6 @@ class user_BootisoController extends Zend_Controller_Action
     									'action' => 'editbootiso',
     									'prebootlist' => $prebootlist, 
     									'groupdepth' => $childgroups, 
-    									'rights' => 'meta',
     									'page' => $this->page));
     		$bootisoForm->populate($bootiso->toArray()); 
     		
@@ -250,7 +245,6 @@ class user_BootisoController extends Zend_Controller_Action
     									'action' => 'editbootiso',
     									'prebootlist' => $prebootlist, 
     									'groupdepth' => $childgroups, 
-    									'rights' => 'meta',
     									'page' => $this->page),$_POST);
     			    			
     		if ($bootisoForm->isValid($_POST)) {
@@ -258,7 +252,6 @@ class user_BootisoController extends Zend_Controller_Action
     			$bootisoold = $bootiso;
     			
     			$bootiso = new Application_Model_BootIso($_POST);
-    			$bootiso->setMembershipID($this->membership->getID());
     			$bootiso->setGroupID($this->membership->getGroupID());
     		    $bootiso->setCreated(time());
     		    $bootiso->setID($bootisoID);
@@ -268,8 +261,8 @@ class user_BootisoController extends Zend_Controller_Action
     		        $bootiso->getExpires() != $bootisoold->getExpires() || 
     		        $bootiso->getPublic() != $bootisoold->getPublic() || 
     		        $bootiso->getSerialnumber() != $bootisoold->getSerialnumber()){
-    				//TODO ACL Is he allowed to edit other than Metadata?
-	    			if(false)
+    				//ACL Is he allowed to edit other than Metadata?
+	    			if(Pbs_Acl::checkRight('bem'))
 	    				$this->_redirect('/user/bootiso/index/page/'.$this->page.'/modifyresult/forbidden');
     		    }
     		    
@@ -303,8 +296,8 @@ class user_BootisoController extends Zend_Controller_Action
 
     public function deletebootisoAction()
     {    	
-    	//TODO ACL Darf er BootISOs löschen?
-    	if(false)
+    	//ACL Darf er BootISOs löschen?
+    	if(!Pbs_Acl::checkRight('bd'))
     		$this->_redirect('/user/bootiso/index/page/'.$this->page.'/deleteresult/forbidden');
     		
     	try{