From cf6f8b952d0583049bc1f13ba0c5e0112cdb1e2e Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Mon, 22 Aug 2016 06:26:34 +0200
Subject: [PATCH] add access check for MyDocuments, MyAccount, MyTransmittals

---
 views/bootstrap/class.Bootstrap.php | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/views/bootstrap/class.Bootstrap.php b/views/bootstrap/class.Bootstrap.php
index 5735c4de0..3242ab7c8 100644
--- a/views/bootstrap/class.Bootstrap.php
+++ b/views/bootstrap/class.Bootstrap.php
@@ -309,8 +309,10 @@ $(document).ready(function () {
 		$content .= "       </ul>\n";
 		$content .= "      </li>\n";
 		}
-		$content .= "    <li class=\"divider\"></li>\n";
-		$content .= "    <li><a href=\"../out/out.MyDocuments.php?inProcess=1\">".getMLText("my_documents")."</a></li>\n";
+		if ($this->check_access('MyDocuments')) {
+			$content .= "    <li class=\"divider\"></li>\n";
+			$content .= "    <li><a href=\"../out/out.MyDocuments.php\">".getMLText("my_documents")."</a></li>\n";
+		}
 		$content .= "     </ul>\n";
 //		$content .= "    </li>\n";
 //		$content .= "   </ul>\n";
@@ -336,9 +338,12 @@ $(document).ready(function () {
 			echo "     <ul class=\"dropdown-menu\" role=\"menu\">\n";
 			if (!$this->params['user']->isGuest()) {
 				$menuitems = array();
-				$menuitems['my_documents'] = array('link'=>"../out/out.MyDocuments.php?inProcess=1", 'label'=>'my_documents');
-				$menuitems['my_account'] = array('link'=>"../out/out.MyAccount.php", 'label'=>'my_account');
-				$menuitems['my_transmittals'] = array('link'=>"../out/out.TransmittalMgr.php", 'label'=>'my_transmittals');
+				if ($this->check_access('MyDocuments'))
+					$menuitems['my_documents'] = array('link'=>"../out/out.MyDocuments.php", 'label'=>'my_documents');
+				if ($this->check_access('MyAccount'))
+					$menuitems['my_account'] = array('link'=>"../out/out.MyAccount.php", 'label'=>'my_account');
+				if ($this->check_access('TransmittalMgr'))
+					$menuitems['my_transmittals'] = array('link'=>"../out/out.TransmittalMgr.php", 'label'=>'my_transmittals');
 				$hookObjs = $this->getHookObjects('SeedDMS_View_Bootstrap');
 				foreach($hookObjs as $hookObj) {
 					if (method_exists($hookObj, 'userMenuItems')) {
@@ -661,7 +666,7 @@ $(document).ready(function () {
 
 	private function myDocumentsNavigationBar() { /* {{{ */
 
-		echo "<id=\"first\"><a href=\"../out/out.MyDocuments.php?inProcess=1\" class=\"brand\">".getMLText("my_documents")."</a>\n";
+		echo "<id=\"first\"><a href=\"../out/out.MyDocuments.php\" class=\"brand\">".getMLText("my_documents")."</a>\n";
 		echo "<div class=\"nav-collapse col2\">\n";
 		echo "<ul class=\"nav\">\n";
 
@@ -2440,6 +2445,7 @@ mayscript>
 	protected function printProtocol($latestContent, $type="") { /* {{{ */
 		$dms = $this->params['dms'];
 		$document = $latestContent->getDocument();
+		$accessop = $this->params['accessobject'];
 ?>
 		<legend><?php printMLText($type.'_log'); ?></legend>
 		<table class="table condensed">