From 0b5fd6ece834cf3d5cfc2f08d649a15abf996754 Mon Sep 17 00:00:00 2001 From: Jean-Baptiste Lievremont Date: Mon, 16 Feb 2015 14:32:17 +0100 Subject: [PATCH] SONAR-6004 Apply project permissions on global dashboards --- .../src/main/webapp/WEB-INF/app/helpers/dashboard_helper.rb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/server/sonar-web/src/main/webapp/WEB-INF/app/helpers/dashboard_helper.rb b/server/sonar-web/src/main/webapp/WEB-INF/app/helpers/dashboard_helper.rb index b8964244898..1dd75591199 100644 --- a/server/sonar-web/src/main/webapp/WEB-INF/app/helpers/dashboard_helper.rb +++ b/server/sonar-web/src/main/webapp/WEB-INF/app/helpers/dashboard_helper.rb @@ -158,7 +158,11 @@ module DashboardHelper if widget.configured begin - widget_body=render :inline => widget.java_definition.getTarget().getTemplate(), :locals => {:widget_properties => widget.properties_as_hash, :widget => widget, :dashboard_configuration => @dashboard_configuration} + if has_role?(:user, @resource) + widget_body=render :inline => widget.java_definition.getTarget().getTemplate(), :locals => {:widget_properties => widget.properties_as_hash, :widget => widget, :dashboard_configuration => @dashboard_configuration} + else + widget_body=message 'not_authorized_to_access_project', h(@resource.name) + end rescue => error logger.error(message('dashboard.cannot_render_widget_x', :params => [widget.java_definition.getId(), error]), error) end -- 2.39.5