MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

fix: [UI] Do not show taxonomy delete menu link when user don't have permission

pull/6720/head
Jakub Onderka 2020-12-09 17:44:03 +01:00
parent 191fe8bc89
commit 5fbbe5bfe7
2 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/Controller/TaxonomiesController.php
View File

@ -1,6 +1,9 @@
<?php
App::uses('AppController', 'Controller');
/**
* @property Taxonomy $Taxonomy
*/
class TaxonomiesController extends AppController
{
public $components = array('Session', 'RequestHandler');
@ -410,7 +413,7 @@ class TaxonomiesController extends AppController
if ($this->request->is('post')) {
$result = $this->Taxonomy->delete($id, true);
if ($result) {
$this->Flash->success(__('Taxonomy successfuly deleted.'));
$this->Flash->success(__('Taxonomy successfully deleted.'));
$this->redirect(array('controller' => 'taxonomies', 'action' => 'index'));
} else {
$this->Flash->error(__('Taxonomy could not be deleted.'));

18
app/View/Elements/genericElements/SideMenu/side_menu.ctp
View File

@ -1085,14 +1085,16 @@ $divider = $this->element('/genericElements/SideMenu/side_menu_divider');
'element_id' => 'view',
'text' => __('View Taxonomy')
));
echo $this->element('/genericElements/SideMenu/side_menu_link', array(
'element_id' => 'delete',
'onClick' => array(
'function' => 'deleteObject',
'params' => array('taxonomies', 'delete', h($id), h($id))
),
'text' => __('Delete Taxonomy')
));
if ($canAccess('taxonomies', 'delete')) {
echo $this->element('/genericElements/SideMenu/side_menu_link', array(
'element_id' => 'delete',
'onClick' => array(
'function' => 'deleteObject',
'params' => array('taxonomies', 'delete', h($id), h($id))
),
'text' => __('Delete Taxonomy')
));
}
}
if ($isSiteAdmin) {
echo $this->element('/genericElements/SideMenu/side_menu_post_link', array(