MT#3975 Prevent subadmin from terminating himself.

lib/NGCP/Panel/Controller/Subscriber.pm

@@ -55,7 +55,6 @@ Catalyst Controller.
 sub auto :Private {
     my ($self, $c) = @_;
     $c->log->debug(__PACKAGE__ . '::auto');
-    $c->log->debug(">>>>>>>>>>>>>>>>> subscriber::auto");
     NGCP::Panel::Utils::Navigation::check_redirect_chain(c => $c);
     return 1;
 }
@@ -63,8 +62,6 @@ sub auto :Private {
 sub sub_list :Chained('/') :PathPart('subscriber') :CaptureArgs(0) {
     my ($self, $c) = @_;
 
-    $c->log->debug(">>>>>>>>>>>>>>>>> subscriber::sub_list");
-
     $c->stash(
         template => 'subscriber/list.tt',
     );
@@ -264,8 +261,6 @@ sub create_list :Chained('sub_list') :PathPart('create') :Args(0) :Does(ACL) :AC
 sub base :Chained('sub_list') :PathPart('') :CaptureArgs(1) {
     my ($self, $c, $subscriber_id) = @_;
 
-    $c->log->debug(">>>>>>>>>>>>>>>>> subscriber::base");
-
     unless($subscriber_id && $subscriber_id->is_integer) {
         NGCP::Panel::Utils::Message->error(
             c     => $c,

share/templates/customer/details.tt

@@ -184,11 +184,11 @@
                             </td>
                             <td class="ngcp-actions-column">
                                 <div class="sw_actions">
-                                    [% UNLESS c.user.readonly -%]
-                                    <a class="btn btn-secondary btn-small" href="[% c.uri_for_action("/subscriber/terminate", [subscriber.id]) %]" data-confirm="Terminate"><i class="icon-remove"></i> Terminate</a>
-                                    [% END -%]
                                     <a class="btn btn-primary btn-small" href="[% c.uri_for_action("/subscriber/details", [subscriber.id]) %]"><i class="icon-th-list"></i> Details</a>
                                     <a class="btn btn-tertiary btn-small" href="[% c.uri_for_action("/subscriber/preferences", [subscriber.id]) %]"><i class="icon-list"></i> Preferences</a>
+                                    [% IF (!c.user.readonly && (c.user.role == 'admin' || c.user.role == 'reseller')) || c.user.uuid != subscriber.uuid -%]
+                                    <a class="btn btn-secondary btn-small" href="[% c.uri_for_action("/subscriber/terminate", [subscriber.id]) %]" data-confirm="Terminate"><i class="icon-remove"></i> Terminate</a>
+                                    [% END -%]
                                 </div>
                             </td>
                         </tr>