Make changes in order to assure that users not in users.conf can still read

web content if cleared past the authentication layer.  Also make changes
to the kickstart editor to indicate to users when they don't have permission
to edit kickstarts -- and to show possible causes.

1 files changed, 5 insertions, 0 deletions

diff --git a/cobbler/webui/CobblerWeb.py b/cobbler/webui/CobblerWeb.py
index 2012708..f6afe2f 100644
--- a/cobbler/webui/CobblerWeb.py
+++ b/cobbler/webui/CobblerWeb.py
@@ -677,10 +677,15 @@ class CobblerWeb(object):
         } )
 
     def ksfile_edit(self, name=None,**spam):
+
+
         if not self.__xmlrpc_setup():
             return self.xmlrpc_auth_failure()
+
+        can_edit = self.remote.check_access_no_fail(self.token,"modify_kickstart",name)
         return self.__render( 'ksfile_edit.tmpl', {
             'name': name,
+            'editable' : can_edit,
             'ksdata': self.remote.read_or_write_kickstart_template(name,True,"",self.token)
         } )