From 478bfdb9a0768490a13b0c68a4537ec6fd0e16b5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andreas=20=C3=96sterreicher?= <oesi@technikum-wien.at>
Date: Fri, 13 Dec 2019 08:54:49 +0100
Subject: [PATCH] Navigationwidget can be called without initial Permission

---
 application/config/navigation.php             |  3 +++
 application/controllers/system/Navigation.php | 11 ++++-------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/application/config/navigation.php b/application/config/navigation.php
index 95ba87f58..09df29d70 100644
--- a/application/config/navigation.php
+++ b/application/config/navigation.php
@@ -14,6 +14,7 @@ $config['navigation_header'] = array(
 			'icon' => 'sitemap',
 			'description' => 'Organisation',
 			'sort' => 20,
+			'requiredPermissions' => 'basis/vilesci:r',
 			'children'=> array(
 				'vilesci' => array(
 					'link' => base_url('vilesci'),
@@ -30,6 +31,7 @@ $config['navigation_header'] = array(
 			'icon' => 'graduation-cap',
 			'description' => 'Lehre',
 			'sort' => 30,
+			'requiredPermissions' => 'basis/vilesci:r',
 			'children'=> array(
 				'cis' => array(
 					'link' => CIS_ROOT,
@@ -68,6 +70,7 @@ $config['navigation_header'] = array(
 			'icon' => 'user',
 			'description' => 'Personen',
 			'sort' => 40,
+			'requiredPermissions' => 'basis/vilesci:r',
 			'children'=> array(
 				'bpk' => array(
 					'link' => site_url('person/BPKWartung'),
diff --git a/application/controllers/system/Navigation.php b/application/controllers/system/Navigation.php
index 1abf7d9a8..190f84acd 100644
--- a/application/controllers/system/Navigation.php
+++ b/application/controllers/system/Navigation.php
@@ -7,7 +7,7 @@ if (! defined('BASEPATH')) exit('No direct script access allowed');
  * Provides data to the ajax get calls about the filter
  * This controller works with JSON calls on the HTTP GET or POST and the output is always JSON
  */
-class Navigation extends Auth_Controller
+class Navigation extends FHC_Controller
 {
 	const NAVIGATION_PAGE_PARAM = 'navigation_page'; // Navigation page parameter name
 
@@ -16,12 +16,9 @@ class Navigation extends Auth_Controller
 	 */
 	public function __construct()
     {
-        parent::__construct(
-			array(
-				'menu' => 'basis/vilesci:r',
-				'header' => 'basis/vilesci:r'
-			)
-		);
+        parent::__construct();
+
+		$this->load->library('AuthLib');
 
 		$this->_loadNavigationLib(); // Loads the NavigationLib with parameters
 	}