blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-10-12 15:04:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Report.php permissions

Browse Source
This commit is contained in:
chfhtw
2026-09-14 09:00:32 +02:00
parent 3826ad68f4
commit 63d4a81e80
1 changed files with 17 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
application/controllers/api/frontend/v1/Report.php
+17 -4
View File
@@ -28,11 +28,10 @@ class Report extends FHCAPI_Controller
*/
public function __construct()
{
// TODO(chris): permissions
parent::__construct([
'list' => self::PERM_LOGGED,
'vars' => self::PERM_LOGGED,
'get' => self::PERM_LOGGED,
'list' => [ 'dashboard/admin:rw', 'basis/statistik:rw' ],
'vars' => self::PERM_LOGGED, // additional permission check inside
'get' => self::PERM_LOGGED, // additional permission check inside
]);
$this->load->model('organisation/Statistik_model', 'StatistikModel');
@@ -70,6 +69,13 @@ class Report extends FHCAPI_Controller
show_404();
$statistik = current($statistik);
// NOTE(chris): Permission check
$permissions = [ 'vars' => $statistik->berechtigung_kurzbz . ':r' ];
if (!$this->permissionlib->isEntitled($permissions, 'vars')) {
$this->_outputAuthError($permissions);
exit; // immediately terminate the execution
}
$vars = $this->loadVars($statistik->sql);
$this->terminateWithSuccess($vars);
@@ -172,6 +178,13 @@ class Report extends FHCAPI_Controller
show_404();
$statistik = current($statistik);
// NOTE(chris): Permission check
$permissions = [ 'get' => $statistik->berechtigung_kurzbz . ':r' ];
if (!$this->permissionlib->isEntitled($permissions, 'get')) {
$this->_outputAuthError($permissions);
exit; // immediately terminate the execution
}
$vars = $this->loadVars($statistik->sql);
$vars_values = [];