Navigationwidget can be called without initial Permission

application/config/navigation.php

@@ -14,6 +14,7 @@ $config['navigation_header'] = array(
 			'icon' => 'sitemap',
 			'description' => 'Organisation',
 			'sort' => 20,
+			'requiredPermissions' => 'basis/vilesci:r',
 			'children'=> array(
 				'vilesci' => array(
 					'link' => base_url('vilesci'),
@@ -30,6 +31,7 @@ $config['navigation_header'] = array(
 			'icon' => 'graduation-cap',
 			'description' => 'Lehre',
 			'sort' => 30,
+			'requiredPermissions' => 'basis/vilesci:r',
 			'children'=> array(
 				'cis' => array(
 					'link' => CIS_ROOT,
@@ -68,6 +70,7 @@ $config['navigation_header'] = array(
 			'icon' => 'user',
 			'description' => 'Personen',
 			'sort' => 40,
+			'requiredPermissions' => 'basis/vilesci:r',
 			'children'=> array(
 				'bpk' => array(
 					'link' => site_url('person/BPKWartung'),

application/controllers/system/Navigation.php

@@ -7,7 +7,7 @@ if (! defined('BASEPATH')) exit('No direct script access allowed');
  * Provides data to the ajax get calls about the filter
  * This controller works with JSON calls on the HTTP GET or POST and the output is always JSON
  */
-class Navigation extends Auth_Controller
+class Navigation extends FHC_Controller
 {
 	const NAVIGATION_PAGE_PARAM = 'navigation_page'; // Navigation page parameter name
 
@@ -16,12 +16,9 @@ class Navigation extends Auth_Controller
 	 */
 	public function __construct()
     {
-        parent::__construct(
-			array(
-				'menu' => 'basis/vilesci:r',
-				'header' => 'basis/vilesci:r'
-			)
-		);
+        parent::__construct();
+
+		$this->load->library('AuthLib');
 
 		$this->_loadNavigationLib(); // Loads the NavigationLib with parameters
 	}