[dozmod] implemented new permission system to module for: deleting expired vm versions, sending testmails and saving mailconfig, resetting templates or saving them, saving runtimeconfig, giving users rights (when no permission, it will show another animation). Also fixed a design issue (dialog instead of modal).

2 files changed, 27 insertions, 4 deletions

diff --git a/modules-available/dozmod/inc/pagedozmodusers.inc.php b/modules-available/dozmod/inc/pagedozmodusers.inc.php
index 8da07923..621f7d34 100644
--- a/modules-available/dozmod/inc/pagedozmodusers.inc.php
+++ b/modules-available/dozmod/inc/pagedozmodusers.inc.php
@@ -16,11 +16,22 @@ class Page_dozmod_users extends Page
 
 	protected function doAjax()
 	{
+		User::load();
+
 		$action = Request::post('action', '', 'string');
 		if ($action === 'setmail' || $action === 'setsu' || $action == 'setlogin') {
-			$this->setUserOption($action);
+			if (User::hasPermission("users.".$action)) {
+				$this->setUserOption($action);
+			} else {
+				die("No permission.");
+			}
+
 		} elseif ($action === 'setorglogin') {
-			$this->setOrgOption($action);
+			if (User::hasPermission("users.orglogin")) {
+				$this->setOrgOption($action);
+			} else {
+				die("No permission.");
+			}
 		} else {
 			die('No such action');
 		}
diff --git a/modules-available/dozmod/inc/pagemailtemplates.inc.php b/modules-available/dozmod/inc/pagemailtemplates.inc.php
index dc41d8c6..90734a50 100644
--- a/modules-available/dozmod/inc/pagemailtemplates.inc.php
+++ b/modules-available/dozmod/inc/pagemailtemplates.inc.php
@@ -7,13 +7,25 @@ class Page_mail_templates extends Page
 
 	protected function doPreprocess()
 	{
+		User::load();
+
 		$action = Request::post('action', 'show', 'string');
 		if ($action === 'show') {
 			$this->fetchTemplates();
 		} elseif ($action === 'save') {
-			$this->handleSave();
+			if (User::hasPermission("templates.save")) {
+				$this->handleSave();
+			} else {
+				Message::addError('main.no-permission');
+				Util::redirect('?do=dozmod&section=templates');
+			}
 		} elseif ($action === 'reset') {
-			$this->handleReset();
+			if(User::hasPermission("templates.reset")) {
+				$this->handleReset();
+			} else {
+				Message::addError('main.no-permission');
+				Util::redirect('?do=dozmod&section=templates');
+			}
 		} else {
 			Message::addError('main.invalid-action', $action);
 			Util::redirect('?do=dozmod&section=templates');