Skip to content

Commit b7672da

Browse files
committed
Purchasing populateData page requires admin permissions, so enforce that
1 parent 2852a25 commit b7672da

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

LabPurchasing/resources/views/begin.html

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,8 @@
3838
header: 'Administration',
3939
items: [{
4040
name: 'Populate Initial Data',
41-
url: LABKEY.ActionURL.buildURL('labpurchasing', 'populateData.view')
41+
url: LABKEY.ActionURL.buildURL('labpurchasing', 'populateData.view'),
42+
hasPermission: LABKEY.Security.currentUser.isAdmin
4243
},{
4344
name: 'Manage Vendors',
4445
url: LABKEY.ActionURL.buildURL('query', 'executeQuery.view', null, {schemaName: 'labpurchasing', queryName: 'vendors'})

LabPurchasing/resources/views/populateData.view.xml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,7 @@
11
<view xmlns="http://labkey.org/data/xml/view" title="Populate Purchasing Lookups and Reference Data">
2+
<permissions>
3+
<permission name="admin"/>
4+
</permissions>
25
<dependencies>
36
<dependency path="laboratory.context" />
47
</dependencies>

0 commit comments

Comments
 (0)