From d786a66adc4b40ce89391534f9fa7eada0683a10 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Fri, 20 Aug 2021 11:16:03 +0200
Subject: [PATCH] check for access on WorkflowGraph

---
 views/bootstrap/class.RemoveWorkflowFromDocument.php | 9 ++++++++-
 views/bootstrap/class.RewindWorkflow.php             | 7 +++++++
 views/bootstrap/class.RunSubWorkflow.php             | 7 +++++++
 3 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/views/bootstrap/class.RemoveWorkflowFromDocument.php b/views/bootstrap/class.RemoveWorkflowFromDocument.php
index c53617df5..8ea1e5cb2 100644
--- a/views/bootstrap/class.RemoveWorkflowFromDocument.php
+++ b/views/bootstrap/class.RemoveWorkflowFromDocument.php
@@ -35,6 +35,7 @@ class SeedDMS_View_RemoveWorkflowFromDocument extends SeedDMS_Theme_Style {
 		$dms = $this->params['dms'];
 		$user = $this->params['user'];
 		$folder = $this->params['folder'];
+		$accessobject = $this->params['accessobject'];
 		$document = $this->params['document'];
 
 		$latestContent = $document->getLatestContent();
@@ -86,7 +87,13 @@ class SeedDMS_View_RemoveWorkflowFromDocument extends SeedDMS_Theme_Style {
 		$this->columnStart(8);
 ?>
 	<div id="workflowgraph">
-	<iframe src="out.WorkflowGraph.php?workflow=<?php echo $workflow->getID(); ?>" width="100%" height="500" style="border: 1px solid #AAA;"></iframe>
+<?php
+		if($accessobject->check_view_access('WorkflowGraph')) {
+?>
+	<iframe src="out.WorkflowGraph.php?workflow=<?php echo $workflow->getID(); ?>" width="100%" height="600" style="border: 1px solid #AAA;"></iframe>
+<?php
+		}
+?>
 	</div>
 <?php
 		$this->columnEnd();
diff --git a/views/bootstrap/class.RewindWorkflow.php b/views/bootstrap/class.RewindWorkflow.php
index 5315b75ac..1becfa69a 100644
--- a/views/bootstrap/class.RewindWorkflow.php
+++ b/views/bootstrap/class.RewindWorkflow.php
@@ -35,6 +35,7 @@ class SeedDMS_View_RewindWorkflow extends SeedDMS_Theme_Style {
 		$dms = $this->params['dms'];
 		$user = $this->params['user'];
 		$folder = $this->params['folder'];
+		$accessobject = $this->params['accessobject'];
 		$document = $this->params['document'];
 
 		$latestContent = $document->getLatestContent();
@@ -85,7 +86,13 @@ class SeedDMS_View_RewindWorkflow extends SeedDMS_Theme_Style {
 		$this->columnStart(8);
 ?>
 	<div id="workflowgraph">
+<?php
+		if($accessobject->check_view_access('WorkflowGraph')) {
+?>
 	<iframe src="out.WorkflowGraph.php?workflow=<?php echo $workflow->getID(); ?>" width="100%" height="600" style="border: 1px solid #AAA;"></iframe>
+<?php
+		}
+?>
 	</div>
 <?php
 		$this->columnEnd();
diff --git a/views/bootstrap/class.RunSubWorkflow.php b/views/bootstrap/class.RunSubWorkflow.php
index c6d90a0f0..8a9a1674b 100644
--- a/views/bootstrap/class.RunSubWorkflow.php
+++ b/views/bootstrap/class.RunSubWorkflow.php
@@ -35,6 +35,7 @@ class SeedDMS_View_RunSubWorkflow extends SeedDMS_Theme_Style {
 		$dms = $this->params['dms'];
 		$user = $this->params['user'];
 		$folder = $this->params['folder'];
+		$accessobject = $this->params['accessobject'];
 		$document = $this->params['document'];
 		$subworkflow = $this->params['subworkflow'];
 
@@ -83,7 +84,13 @@ class SeedDMS_View_RunSubWorkflow extends SeedDMS_Theme_Style {
 		$this->columnStart(8);
 ?>
 	<div id="workflowgraph">
+<?php
+		if($accessobject->check_view_access('WorkflowGraph')) {
+?>
 	<iframe src="out.WorkflowGraph.php?workflow=<?php echo $subworkflow->getID(); ?>" width="100%" height="600" style="border: 1px solid #AAA;"></iframe>
+<?php
+		}
+?>
 	</div>
 <?php
 		$this->columnEnd();