From: Jo-Philipp Wich <jo@mein.io>
Date: Thu, 16 Apr 2020 13:35:13 +0000 (+0200)
Subject: luci-mod-system: flash.js: make readonly on insufficient ACLs
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=684f7dd7dc21e61a73ecf20f9e6e158af39872a6;p=oweals%2Fluci.git

luci-mod-system: flash.js: make readonly on insufficient ACLs

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
---

diff --git a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/flash.js b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/flash.js
index b058091f9..c1e127377 100644
--- a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/flash.js
+++ b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/flash.js
@@ -6,6 +6,8 @@
 'require fs';
 'require ui';
 
+var isReadonlyView = !L.hasViewPermission();
+
 var callSystemValidateFirmwareImage = rpc.declare({
 	object: 'system',
 	method: 'validate_firmware_image',
@@ -353,6 +355,7 @@ return view.extend({
 
 		m = new form.JSONMap(mapdata, _('Flash operations'));
 		m.tabbed = true;
+		m.readonly = isReadonlyView;
 
 		s = m.section(form.NamedSection, 'actions', _('Actions'));
 
@@ -422,7 +425,8 @@ return view.extend({
 					node.appendChild(E('div', { 'class': 'cbi-page-actions' }, [
 						E('button', {
 							'class': 'cbi-button cbi-button-save',
-							'click': ui.createHandlerFn(view, 'handleBackupSave', this.map)
+							'click': ui.createHandlerFn(view, 'handleBackupSave', this.map),
+							'disabled': isReadonlyView
 						}, [ _('Save') ])
 					]));