Bug Fix: Minor permission enforcements

Also some UI tweaks.
2014-02-13 15:27:04 +11:00
parent a6a65c54c7
commit 2ac3a9bdd3
9 changed files with 445 additions and 223 deletions
@@ -1,6 +1,7 @@
@model IEnumerable<Disco.Models.Services.Searching.DeviceSearchResultItem>
@{
    var canShowDevices = Authorization.Has(Claims.Device.Show);
+    var canShowUsers = Authorization.Has(Claims.User.Show);
 }
 <div class="genericData deviceTable">
    @if (Model != null && Model.Count() > 0)
@@ -70,7 +71,15 @@
                            }
                            else
                            { 
-                                <span>@item.AssignedUserDescription</span>
+                                <span>@if (canShowUsers)
+                                      {
+                                    @Html.ActionLink(item.AssignedUserDescription, MVC.User.Show(item.AssignedUserId))
+                                      }
+                                      else
+                                      {
+                                    @item.AssignedUserDescription
+                                      }
+                                </span>
                            }
                        </td>
                        <td>