Restrict access to the admin pages using fine-grained permissions

2011-12-20 01:44:05 +00:00
parent fcea8eec59
commit 4a81b0ce7b
6 changed files with 39 additions and 3 deletions
--- a/source/webui/pages/admin.php
+++ b/source/webui/pages/admin.php
@@ -4,6 +4,10 @@ $main = StatusBoard_Main::instance();
 $auth = $main->auth();
 $config = $main->config();

+if ( ! $auth->isAuthenticated() || ! $auth->hasPermission(StatusBoard_Permission::PERM_Administrator)) {
+    throw new StatusBoard_Exception_NotAuthorised();
+}
+
 $services = StatusBoard_Service::all();
 $this->smarty->assign('services', $services);