diff --git a/application/config/searchcis.php b/application/config/searchcis.php index 12bad025d..6d513c499 100644 --- a/application/config/searchcis.php +++ b/application/config/searchcis.php @@ -22,8 +22,9 @@ unset($config['student']['searchfields']['email']); unset($config['student']['searchfields']['tel']); $config['student']['resultfields'] = [ "s.student_uid AS uid", - "s.matrikelnr", + "s.matrikelnr AS personenkennzeichen", "p.person_id", + "p.matr_nr AS matrikelnummer", "(p.vorname || ' ' || p.nachname) AS name", "ARRAY[s.student_uid || '@' || '" . DOMAIN . "'] AS email", "CASE diff --git a/application/controllers/api/frontend/v1/LvPlan.php b/application/controllers/api/frontend/v1/LvPlan.php index dc87732b9..2e8ac52d4 100644 --- a/application/controllers/api/frontend/v1/LvPlan.php +++ b/application/controllers/api/frontend/v1/LvPlan.php @@ -99,7 +99,7 @@ class LvPlan extends FHCAPI_Controller $end_date = $this->input->post('end_date', true); $uid = $this->input->post('uid', true); - // disallow accessing other user's lv plan if missing permission + // disallow accessing other user's events if missing permission if ($uid && $uid !== getAuthUID() && !$this->permissionlib->isBerechtigt('basis/other_lv_plan')) { $this->terminateWithError("Missing permission to view other users' timetables!"); } @@ -288,6 +288,11 @@ class LvPlan extends FHCAPI_Controller $end_date = $this->input->post('end_date', true); $uid = $this->input->post('uid', true); + // disallow accessing other user's reservierungen if missing permission + if ($uid && $uid !== getAuthUID() && !$this->permissionlib->isBerechtigt('basis/other_lv_plan')) { + $this->terminateWithError("Missing permission to view other users' timetables!"); + } + // get data $this->load->library('StundenplanLib'); diff --git a/public/js/components/Cis/Cms/News.js b/public/js/components/Cis/Cms/News.js index edf700db5..7c73bcb67 100644 --- a/public/js/components/Cis/Cms/News.js +++ b/public/js/components/Cis/Cms/News.js @@ -109,7 +109,7 @@ export default {

News


- -