diff options
author | Simon Rettberg | 2018-03-04 16:42:05 +0100 |
---|---|---|
committer | Simon Rettberg | 2018-03-04 16:42:05 +0100 |
commit | aadf3feb7b8090796a4dd083c90a5bc4893c8faf (patch) | |
tree | 515e141009a855d76011e315b2f832c51adc0409 /modules-available/statistics/pages/projectors.inc.php | |
parent | [sysconfig] Add permissions (diff) | |
download | slx-admin-aadf3feb7b8090796a4dd083c90a5bc4893c8faf.tar.gz slx-admin-aadf3feb7b8090796a4dd083c90a5bc4893c8faf.tar.xz slx-admin-aadf3feb7b8090796a4dd083c90a5bc4893c8faf.zip |
[statistics] Refine permissions, add some new ones
Diffstat (limited to 'modules-available/statistics/pages/projectors.inc.php')
-rw-r--r-- | modules-available/statistics/pages/projectors.inc.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/modules-available/statistics/pages/projectors.inc.php b/modules-available/statistics/pages/projectors.inc.php index cde542c6..cdd0195e 100644 --- a/modules-available/statistics/pages/projectors.inc.php +++ b/modules-available/statistics/pages/projectors.inc.php @@ -13,6 +13,7 @@ class SubPage private static function handleProjector($action) { + User::assertPermission('hardware.projectors.edit'); $hwid = Request::post('hwid', false, 'int'); if ($hwid === false) { Util::traceError('Param hwid missing'); @@ -43,6 +44,7 @@ class SubPage private static function showProjectors() { + User::assertPermission('hardware.projectors.*'); $res = Database::simpleQuery('SELECT h.hwname, h.hwid FROM statistic_hw h' . " INNER JOIN statistic_hw_prop p ON (h.hwid = p.hwid AND p.prop = :projector)" . " WHERE h.hwtype = :screen ORDER BY h.hwname ASC", array( |