From: Ivan Kohler <ivan@freeside.biz>
Date: Mon, 9 Nov 2020 21:36:41 +0000 (-0800)
Subject: ACL for hardware class config, RT#85057
X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=commitdiff_plain;h=20f03d52cc6c930f610c0b4466eeeeda54fdbb40;hp=4d4171d7ad39732b07839d90e1d74b9f84772d45

ACL for hardware class config, RT#85057
---

diff --git a/FS/FS/AccessRight.pm b/FS/FS/AccessRight.pm
index 701f7724a..5badba76c 100644
--- a/FS/FS/AccessRight.pm
+++ b/FS/FS/AccessRight.pm
@@ -416,6 +416,8 @@ tie my %rights, 'Tie::IxHash',
     { rightname=>'Alarm configuration' },
     { rightname=>'Alarm global configuration', global=>1 },
 
+    { rightname=>'Edit hardware classes and types' },
+
     { rightname=> 'Configure network monitoring', global=>1 },
 
     #{ rightname=>'Edit employees', global=>1, },
diff --git a/FS/FS/access_right.pm b/FS/FS/access_right.pm
index 155da739e..226c81efb 100644
--- a/FS/FS/access_right.pm
+++ b/FS/FS/access_right.pm
@@ -261,6 +261,7 @@ sub _upgrade_data { # class method
     'Edit customer note' => 'Delete customer note',
     'Edit customer' => 'Edit customer invoice terms',
     'Financial reports' => 'Basic payment and refund reports',
+    'Configuration' => 'Edit hardware clases and types',
   );
 
 #  foreach my $old_acl ( keys %onetime ) {
diff --git a/httemplate/browse/hardware_class.html b/httemplate/browse/hardware_class.html
index 0bf314e3f..6423f4a25 100644
--- a/httemplate/browse/hardware_class.html
+++ b/httemplate/browse/hardware_class.html
@@ -22,7 +22,7 @@
 my $curuser = $FS::CurrentUser::CurrentUser;
 
 die "access denied"
-  unless $curuser->access_right('Configuration');
+  unless $curuser->access_right('Edit hardware classes and types');
 
 my $menubar = 
   [ 'Hardware statuses'    => $p.'browse/hardware_status.html',
diff --git a/httemplate/browse/hardware_status.html b/httemplate/browse/hardware_status.html
index 89ae83035..64ad5ad7f 100644
--- a/httemplate/browse/hardware_status.html
+++ b/httemplate/browse/hardware_status.html
@@ -16,7 +16,7 @@
 my $curuser = $FS::CurrentUser::CurrentUser;
 
 die "access denied"
-  unless $curuser->access_right('Configuration');
+  unless $curuser->access_right('Edit hardware classes and types');
 
 my $menubar = [ 'Hardware classes' => $p.'browse/hardware_class.html',
                 'Add a status' => $p.'edit/hardware_status.html' ];
diff --git a/httemplate/edit/hardware_class.html b/httemplate/edit/hardware_class.html
index 26f487dda..8d5412bd2 100644
--- a/httemplate/edit/hardware_class.html
+++ b/httemplate/edit/hardware_class.html
@@ -11,6 +11,6 @@
 <%init>
 
 die "access denied"
-  unless $FS::CurrentUser::CurrentUser->access_right('Configuration');
+  unless $FS::CurrentUser::CurrentUser->access_right('Edit hardware classes and types');
 
 </%init>
diff --git a/httemplate/edit/hardware_status.html b/httemplate/edit/hardware_status.html
index 23e5b6eba..c8cb68cd4 100644
--- a/httemplate/edit/hardware_status.html
+++ b/httemplate/edit/hardware_status.html
@@ -19,6 +19,6 @@
 <%init>
 
 die "access denied"
-  unless $FS::CurrentUser::CurrentUser->access_right('Configuration');
+  unless $FS::CurrentUser::CurrentUser->access_right('Edit hardware classes and types');
 
 </%init>
diff --git a/httemplate/edit/process/hardware_class.html b/httemplate/edit/process/hardware_class.html
index 64bc72efe..54e2af694 100644
--- a/httemplate/edit/process/hardware_class.html
+++ b/httemplate/edit/process/hardware_class.html
@@ -6,6 +6,6 @@
 <%init>
 
 die "access denied"
-  unless $FS::CurrentUser::CurrentUser->access_right('Configuration');
+  unless $FS::CurrentUser::CurrentUser->access_right('Edit hardware classes and types');
 
 </%init>
diff --git a/httemplate/edit/process/hardware_status.html b/httemplate/edit/process/hardware_status.html
index 61f02e215..d790eb5ba 100644
--- a/httemplate/edit/process/hardware_status.html
+++ b/httemplate/edit/process/hardware_status.html
@@ -6,6 +6,6 @@
 <%init>
 
 die "access denied"
-  unless $FS::CurrentUser::CurrentUser->access_right('Configuration');
+  unless $FS::CurrentUser::CurrentUser->access_right('Edit hardware classes and types');
 
 </%init>
diff --git a/httemplate/edit/process/hardware_type.html b/httemplate/edit/process/hardware_type.html
index 52787011c..954e76d03 100644
--- a/httemplate/edit/process/hardware_type.html
+++ b/httemplate/edit/process/hardware_type.html
@@ -6,6 +6,6 @@
 <%init>
 
 die "access denied"
-  unless $FS::CurrentUser::CurrentUser->access_right('Configuration');
+  unless $FS::CurrentUser::CurrentUser->access_right('Edit hardware classes and types');
 
 </%init>
diff --git a/httemplate/elements/menu.html b/httemplate/elements/menu.html
index 091ec1245..f6fc25498 100644
--- a/httemplate/elements/menu.html
+++ b/httemplate/elements/menu.html
@@ -693,7 +693,7 @@ $config_export_svc{'Circuits'} = [ \%config_circuit, '' ]
 $config_export_svc{'Fiber'} = [ \%config_fiber, '' ]
   if $curuser->access_right('Configuration');
 $config_export_svc{'Hardware types'} = [ $fsurl.'browse/hardware_class.html', 'Set up hardware type catalog' ]
-  if $curuser->access_right('Configuration');
+  if $curuser->access_right('Edit hardware classes and types');
 
 tie my %config_pkg_reason, 'Tie::IxHash',
   'Cancel reasons' => [ $fsurl.'browse/reason_type.html?class=C', 'Cancel reasons explain why a service was cancelled.' ],