Show friendly error message if user does not have sync permissions, also update

WebUI "docs" page that points to other public docs.

1 files changed, 7 insertions, 0 deletions

diff --git a/cobbler/webui/CobblerWeb.py b/cobbler/webui/CobblerWeb.py
index 3aa0d9d..727e4cb 100644
--- a/cobbler/webui/CobblerWeb.py
+++ b/cobbler/webui/CobblerWeb.py
@@ -742,6 +742,13 @@ class CobblerWeb(object):
         if not self.__xmlrpc_setup():
             return self.xmlrpc_auth_failure()
 
+        can_edit = self.remote.check_access_no_fail(self.token,"sync",None)
+        if not can_edit:
+           return self.__render('message.tmpl', {
+               'message1' : "Access denied.",
+               'message2' : "You do not have permission to create new objects."
+           })
+
         try:
             rc = self.remote.sync(self.token)
             if not rc: