Skip to content
Snippets Groups Projects
Commit a275f847 authored by Armand Bahi's avatar Armand Bahi
Browse files

Merge branch 'bug/35-api-interdire-l-acces-a-vitis-webservices-aux-non-vitis-admin' into 'master'

Resolve "[API] Interdire l'accès à vitis/webservices aux non vitis admin"

Closes #35

See merge request Development/vitis_apps/application/vmap!31
parents 593224f1 ea00e2cc
No related branches found
No related tags found
No related merge requests found
...@@ -190,6 +190,14 @@ class WebServices extends Vitis { ...@@ -190,6 +190,14 @@ class WebServices extends Vitis {
* @return Columns * @return Columns
*/ */
function GET() { function GET() {
// Privilège "vitis_admin" requis.
if (!in_array('vitis_admin', $this->oConnection->aPrivileges)) {
$oError = new VitisError(1, "Rights problem : you don't have rights to list webservices");
$aXmlRacineAttribute['status'] = 0;
$sMessage = $oError->asDocument('', 'vitis', $this->aValues['sEncoding'], True, $aXmlRacineAttribute, $this->aValues['sSourceEncoding'], $this->aValues['output']);
return $sMessage;
}
if ($this->oConnection->oError == null) { if ($this->oConnection->oError == null) {
require("../doc/vendor/autoload.php"); require("../doc/vendor/autoload.php");
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment