Check permissions before allowing users to use this import tool
[manu/RT-Extension-ImportCustomFieldValues.git] / html / Callbacks / ImportCustomFieldValues / Elements / Tabs / Privileged
1 <%INIT>
2 my $request_path = $HTML::Mason::Commands::r->path_info;
3 if ( $request_path =~ qr{^/Admin/CustomFields/} && $m->request_args->{'id'} &&  $m->request_args->{'id'} =~ /^\d+$/ ) {
4     my $tabs = PageMenu;
5     my $CustomField = RT::CustomField->new( $session{'CurrentUser'} );
6     $CustomField->Load($m->request_args->{'id'});
7     if ( $CustomField->Type && $CustomField->Type eq 'Select' 
8          && ( $session{CurrentUser}->HasRight( Right => 'AdminCustomFieldValues', Object => $CustomField )
9          || $session{CurrentUser}->HasRight( Right => 'AdminCustomField', Object => $CustomField ) )
10         ) {
11         $tabs->child(
12             'cf-import-values' => title => loc('Import from CSV'),
13             path => '/Admin/CustomFields/ImportValues.html?id=' . $m->request_args->{'id'}
14         );
15     }
16 }
17
18 </%INIT>