Merge pull request #2182 from NoScopie/patch-3

Added user permissions check

Resources/views/CRUD/base_edit_form.html.twig

@@ -78,7 +78,7 @@
                         {% if admin.id(object) is not null %}
                             <button type="submit" class="btn btn-success" name="btn_update_and_edit"><i class="fa fa-save"></i> {{ 'btn_update_and_edit_again'|trans({}, 'SonataAdminBundle') }}</button>
 
-                            {% if admin.hasroute('list') %}
+                            {% if admin.hasroute('list') and admin.isGranted('LIST') %}
                                 <button type="submit" class="btn btn-success" name="btn_update_and_list"><i class="fa fa-save"></i> <i class="fa fa-list"></i> {{ 'btn_update_and_return_to_list'|trans({}, 'SonataAdminBundle') }}</button>
                             {% endif %}
 
@@ -91,10 +91,10 @@
                                 <a class="btn btn-info" href="{{ admin.generateObjectUrl('acl', object) }}"><i class="fa fa-users"></i> {{ 'link_edit_acl'|trans({}, 'SonataAdminBundle') }}</a>
                             {% endif %}
                         {% else %}
-                            {% if admin.hasroute('edit') %}
+                            {% if admin.hasroute('edit') and admin.isGranted('EDIT') %}
                                 <button class="btn btn-success" type="submit" name="btn_create_and_edit"><i class="fa fa-save"></i> {{ 'btn_create_and_edit_again'|trans({}, 'SonataAdminBundle') }}</button>
                             {% endif %}
-                            {% if admin.hasroute('list') %}
+                            {% if admin.hasroute('list') and admin.isGranted('LIST') %}
                                 <button type="submit" class="btn btn-success" name="btn_create_and_list"><i class="fa fa-save"></i> <i class="fa fa-list"></i> {{ 'btn_create_and_return_to_list'|trans({}, 'SonataAdminBundle') }}</button>
                             {% endif %}
                             <button class="btn btn-success" type="submit" name="btn_create_and_create"><i class="fa fa-plus-circle"></i> {{ 'btn_create_and_create_a_new_one'|trans({}, 'SonataAdminBundle') }}</button>