From c22c2809c68d9b4196f1cc681cba9865e2d97e39 Mon Sep 17 00:00:00 2001 From: Gerhard Jungwirth Date: Thu, 7 Dec 2017 17:30:31 +0100 Subject: [PATCH] TT#27154 make timezone ajax acessible to subadmin does not contain sensitive data, only a list of available timezones for the datatables table to be shown. this is needed in Subscribers -> edit Master dialogue for subscribers Change-Id: Ie05f8635e97ad3814332e07e879979bb07664393 (cherry picked from commit 248e5c88b884c75629763345270f3f5adc44c110) --- lib/NGCP/Panel/Controller/Contact.pm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/NGCP/Panel/Controller/Contact.pm b/lib/NGCP/Panel/Controller/Contact.pm index 1abfe3e2ed..eb50b4576e 100644 --- a/lib/NGCP/Panel/Controller/Contact.pm +++ b/lib/NGCP/Panel/Controller/Contact.pm @@ -10,14 +10,14 @@ use NGCP::Panel::Utils::Message; use NGCP::Panel::Utils::Navigation; use NGCP::Panel::Utils::DateTime qw(); -sub auto :Does(ACL) :ACLDetachTo('/denied_page') :AllowedRole(admin) :AllowedRole(reseller) { +sub auto :Private { my ($self, $c) = @_; $c->log->debug(__PACKAGE__ . '::auto'); NGCP::Panel::Utils::Navigation::check_redirect_chain(c => $c); return 1; } -sub list_contact :Chained('/') :PathPart('contact') :CaptureArgs(0) { +sub list_contact :Chained('/') :PathPart('contact') :CaptureArgs(0) :Does(ACL) :ACLDetachTo('/denied_page') :AllowedRole(admin) :AllowedRole(reseller) { my ($self, $c) = @_; my $contacts = $c->model('DB')->resultset('contacts')->search({ @@ -329,7 +329,7 @@ sub ajax_list_contacts{ } -sub countries_ajax :Chained('/') :PathPart('contact/country/ajax') :Args(0) { +sub countries_ajax :Chained('/') :PathPart('contact/country/ajax') :Args(0) :Does(ACL) :ACLDetachTo('/denied_page') :AllowedRole(admin) :AllowedRole(reseller) { my ($self, $c) = @_; my $from = $c->request->params->{iDisplayStart} // 0;