oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add permission checks to schedule JSON in the EMS.

Browse source
This commit is contained in:
Colin Kuskie 2009-09-15 18:43:50 -07:00
parent bcaff3b9eb
commit b2798a47a1
2 changed files with 21 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/WebGUI/Asset/Wobject/EventManagementSystem.pm
View file

@ -1156,6 +1156,7 @@ returns the JSON data for a page of the schedule table
sub www_getScheduleDataJSON {
my $self = shift;
my $session = $self->session;
return $session->privilege->insufficient() unless $self->canView;
# the following two are expected to be configurable...
my $locationsPerPage = $self->get('scheduleColumnsPerPage');
@ -2053,7 +2054,7 @@ sub www_toggleRegistrantCheckedIn {
=head2 www_viewSchedule ()
view the schedule table
View the schedule table.
=cut
@ -2076,7 +2077,7 @@ sub www_viewSchedule {
rowsPerPage => $rowsPerPage,
dataColumns => $dataColumns,
fieldList => $fieldList,
dataSourceUrl => $self->getUrl('func=getScheduleDataJSON'),
dataSourceUrl => $self->getUrl('func=getScheduleDataJSON'),
},$self->get('scheduleTemplateId')));
}