From 777eb34230a75f8798caa8e6b024f3c48542a428 Mon Sep 17 00:00:00 2001
From: Kevin Ditscheid <kevin.ditscheid@sgalinski.de>
Date: Wed, 10 Oct 2018 18:35:22 +0200
Subject: [PATCH] [TASK] Make CreateJob button on index page in backend module
admin only
To prevent users from clicking the "Create New" button on the index
page of the backend module, we make this button admin only
---
Classes/Controller/BackendController.php | 1 +
Resources/Private/Backend/Templates/Index.html | 4 +++-
2 files changed, 4 insertions(+), 1 deletion(-)
diff --git a/Classes/Controller/BackendController.php b/Classes/Controller/BackendController.php
index d751cc61..3c5b09db 100644
--- a/Classes/Controller/BackendController.php
+++ b/Classes/Controller/BackendController.php
@@ -103,6 +103,7 @@ class BackendController extends ActionController {
$this->view->assign('pageUid', $pageUid);
} else {
$this->view->assign('noRecords', 1);
+ $this->view->assign('isAdmin', $GLOBALS['BE_USER']->isAdmin());
$this->addFlashMessage(
LocalizationUtility::translate('backend.notice.noRecords', 'SgJobs'), '', FlashMessage::INFO
);
diff --git a/Resources/Private/Backend/Templates/Index.html b/Resources/Private/Backend/Templates/Index.html
index 329a0a81..9dd2e2e2 100644
--- a/Resources/Private/Backend/Templates/Index.html
+++ b/Resources/Private/Backend/Templates/Index.html
@@ -53,7 +53,9 @@
</f:then>
<f:else>
<f:render partial="SelectRoot" arguments="{pages: pages}" />
- <f:render partial="CreateJob" arguments="{pageUid:pageUid}" />
+ <f:if condition="{isAdmin}">
+ <f:render partial="CreateJob" arguments="{pageUid:pageUid}" />
+ </f:if>
</f:else>
</f:if>
--
GitLab