show remote fork button only if user cannot write

diff --git a/data/templates/display-head.htm b/data/templates/display-head.htm
index f610f84174fd05e1d4db70fc33e1b4fbec68e81d..aa7daecdd91006cdacf501ea605ebbe7a7b58b2f 100644 (file)
--- a/data/templates/display-head.htm
+++ b/data/templates/display-head.htm
@@ -8,13 +8,19 @@
  <div class="span2 pull-right">
   <form method="post" action="{{repo.getLink('fork')}}">
    <div class="btn-group pull-right">
  <div class="span2 pull-right">
   <form method="post" action="{{repo.getLink('fork')}}">
    <div class="btn-group pull-right">

+    {% if htmlhelper.mayWriteLocally %}

     <button type="submit" class="btn"><i class="icon-share"></i> fork</button>
     <button type="submit" class="btn"><i class="icon-share"></i> fork</button>

+    {% else %}
+    <a class="btn" href="{{repo.getLink('remotefork')}}"><i class="icon-share"></i> Fork to remote system</a>
+    {% endif %}

     <button class="btn dropdown-toggle" data-toggle="dropdown">
      <span class="caret"></span>
     </button>
     <ul class="dropdown-menu">
     <button class="btn dropdown-toggle" data-toggle="dropdown">
      <span class="caret"></span>
     </button>
     <ul class="dropdown-menu">

+     {% if htmlhelper.mayWriteLocally %}

      <li><a href="{{repo.getLink('remotefork')}}"><i class="icon-share"></i> Fork to remote system</a></li>
      <li class="divider"></li>
      <li><a href="{{repo.getLink('remotefork')}}"><i class="icon-share"></i> Fork to remote system</a></li>
      <li class="divider"></li>

+     {% endif %}

      <li><a href="help#remote-forking"><i class="icon-question-sign"></i> Help on remote forking</a></li>
     </ul>
    </div>
      <li><a href="help#remote-forking"><i class="icon-question-sign"></i> Help on remote forking</a></li>
     </ul>
    </div>

diff --git a/src/phorkie/HtmlHelper.php b/src/phorkie/HtmlHelper.php
index ca5f98981be818febdd84e50286fc368161b21c2..c3336c36b1a6da2cfaf996c3879008a615baa7d3 100644 (file)
--- a/src/phorkie/HtmlHelper.php
+++ b/src/phorkie/HtmlHelper.php
@@ -49,6 +49,28 @@ class HtmlHelper
     {
         return Tools::fullUrl($path);
     }
     {
         return Tools::fullUrl($path);
     }

+
+    public function mayWriteLocally()
+    {
+        if ($GLOBALS['phorkie']['auth']['securityLevel'] == 0) {
+            //everyone may do everything
+            return true;
+        }
+
+        $logged_in = false;
+        if (!isset($_SESSION['identity'])) {
+            //not logged in
+        } else if ($GLOBALS['phorkie']['auth']['listedUsersOnly']) {
+            if (in_array($_SESSION['identity'], $GLOBALS['phorkie']['auth']['users'])) {
+                $logged_in = true;
+            }
+        } else {
+            //session identity exists, no special checks required
+            $logged_in = true;
+        }
+
+        return $logged_in;
+    }

 }
 
 ?>
 }
 
 ?>