Explorar o código

Merge pull request #1936 from pulzarraider/patch-3

Added missing security check in inline show action
Thomas %!s(int64=11) %!d(string=hai) anos
pai
achega
7e7245288e
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      Resources/views/CRUD/list__action_show.html.twig

+ 1 - 1
Resources/views/CRUD/list__action_show.html.twig

@@ -9,7 +9,7 @@ file that was distributed with this source code.
 
 #}
 
-{% if admin.hasRoute('show') %}
+{% if admin.isGranted('VIEW', object) and admin.hasRoute('show') %}
     <a href="{{ admin.generateObjectUrl('show', object) }}" class="btn view_link btn-small" title="{{ 'action_show'|trans({}, 'SonataAdminBundle') }}">
         <i class="icon-zoom-in"></i>
         {{ 'action_show'|trans({}, 'SonataAdminBundle') }}