litvinovg/vitro
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix permissions in site

Browse source
This commit is contained in:
Graham Triggs 2017-09-23 13:24:35 +01:00
parent a647ea0156
commit aef83490cf
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
api/src/main/java/edu/cornell/mannlib/vitro/webapp/controller/freemarker/BaseSiteAdminController.java
View file

@ -112,7 +112,7 @@ public class BaseSiteAdminController extends FreemarkerHttpServlet {
Map<String, Object> urls = new HashMap<>(); Map<String, Object> urls = new HashMap<>();
for (AdminUrl adminUrl : siteMaintenanceUrls) { for (AdminUrl adminUrl : siteMaintenanceUrls) {
if (adminUrl.permission == null || PolicyHelper.isAuthorizedForActions(vreq, SimplePermission.USE_MISCELLANEOUS_ADMIN_PAGES.ACTION)) { if (adminUrl.permission == null || PolicyHelper.isAuthorizedForActions(vreq, adminUrl.permission)) {
if (adminUrl.url.startsWith("javascript:")) { if (adminUrl.url.startsWith("javascript:")) {
urls.put(adminUrl.key, adminUrl.url); urls.put(adminUrl.key, adminUrl.url);
} else { } else {
@ -175,7 +175,7 @@ public class BaseSiteAdminController extends FreemarkerHttpServlet {
Map<String, Object> data = new HashMap<String, Object>(); Map<String, Object> data = new HashMap<String, Object>();
for (AdminUrl adminUrl : siteConfigData) { for (AdminUrl adminUrl : siteConfigData) {
if (adminUrl.permission == null || PolicyHelper.isAuthorizedForActions(vreq, SimplePermission.USE_MISCELLANEOUS_ADMIN_PAGES.ACTION)) { if (adminUrl.permission == null || PolicyHelper.isAuthorizedForActions(vreq, adminUrl.permission)) {
if (adminUrl.url.startsWith("javascript:")) { if (adminUrl.url.startsWith("javascript:")) {
data.put(adminUrl.key, adminUrl.url); data.put(adminUrl.key, adminUrl.url);
} else { } else {