implemented permission for viewing other users' lv plans

application/controllers/Cis/Profil.php

@@ -79,6 +79,9 @@ class Profil extends Auth_Controller
 		$viewData = array (
 			'uid' => $uid,
 			'profil_data'=>$profil_data,
+			'permissions' => [
+				'basis/other_lv_plan' => $this->permissionlib->isBerechtigt(('basis/other_lv_plan')),
+			]
 		);
 		if($uid == getAuthUID()){
 			$viewData['editable'] = true;

application/controllers/Cis4.php

@@ -1,6 +1,7 @@
 <?php
 
-if (! defined('BASEPATH')) exit('No direct script access allowed');
+if (!defined('BASEPATH'))
+	exit('No direct script access allowed');
 
 /**
  *
@@ -13,9 +14,9 @@ class Cis4 extends Auth_Controller
 	public function __construct()
 	{
 		parent::__construct(
-		    array(
-			'index' => 'basis/cis:r'
-		    )
+			array(
+				'index' => 'basis/cis:r'
+			)
 		);
 
 		// Load Config
@@ -32,12 +33,12 @@ class Cis4 extends Auth_Controller
 	{
 		$this->load->model('person/Person_model', 'PersonModel');
 		$personData = getData($this->PersonModel->getByUid(getAuthUID()))[0];
-		
+
 		$viewData = array(
 			'uid' => getAuthUID(),
 			'name' => $personData->vorname,
 			'person_id' => $personData->person_id,
-			'timezone' => $this->config->item('timezone')
+			'timezone' => $this->config->item('timezone'),
 		);
 
 		$this->load->view('CisRouterView/CisRouterView.php', ['viewData' => $viewData, 'route' => 'FhcDashboard']);

application/controllers/api/frontend/v1/LvPlan.php

@@ -47,7 +47,7 @@ class LvPlan extends FHCAPI_Controller
 			'fetchFerienEvents' => self::PERM_LOGGED,
 			'getStudiengaenge' => self::PERM_LOGGED,
 			'getLehrverband' => self::PERM_LOGGED,
-
+			'permissionOtherLvPlan' => self::PERM_LOGGED,
 		]);
 
 		$this->load->library('LogLib');
@@ -378,6 +378,16 @@ class LvPlan extends FHCAPI_Controller
 		return $this->terminateWithSuccess($data);
 	}
 
+	/**
+	 * Checks if the current user has permission to view other users' timetables
+	 *
+	 * @return void
+	 */
+	public function permissionOtherLvPlan()
+	{
+		$this->terminateWithSuccess($this->permissionlib->isBerechtigt('basis/other_lv_plan'));
+	}
+
 	/**
 	 * fetch moodle events
 	 *