Added permission check in Building::delete()
This commit is contained in:
@@ -146,6 +146,11 @@ class BuildingController extends mfBaseController {
|
||||
}
|
||||
|
||||
protected function deleteAction() {
|
||||
if(!$this->me->is("Admin") && !$this->me->is("pipeplanner")) {
|
||||
$this->layout()->setFlash("Keine Berechtigung", "error");
|
||||
$this->redirect("Building");
|
||||
}
|
||||
|
||||
$id = $this->request->id;
|
||||
|
||||
if(!is_numeric($id) || !$id) {
|
||||
|
||||
Reference in New Issue
Block a user