Skynet/misc_pterodactyl-panel
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Block viewing node allocations and location unless user has permission

Browse source 
Blocks viewing the allocation list and location for a node unless a
user has permission to view the node in the first place.
This commit is contained in:
Dane Everitt 2017-04-08 12:07:17 -04:00
parent 4479d3bf19
commit 463f465dea
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
app/Transformers/Admin/NodeTransformer.php
View file

@ -80,6 +80,10 @@ class NodeTransformer extends TransformerAbstract
*/ */
public function includeAllocations(Node $node) public function includeAllocations(Node $node)
{ {
if ($this->request && ! $this->request->apiKeyHasPermission('view-node')) {
return;
}
return $this->collection($node->allocations, new AllocationTransformer, 'allocation'); return $this->collection($node->allocations, new AllocationTransformer, 'allocation');
} }
@ -90,6 +94,10 @@ class NodeTransformer extends TransformerAbstract
*/ */
public function includeLocation(Node $node) public function includeLocation(Node $node)
{ {
if ($this->request && ! $this->request->apiKeyHasPermission('view-node')) {
return;
}
return $this->item($node->location, new LocationTransformer, 'location'); return $this->item($node->location, new LocationTransformer, 'location');
} }