From 9241a0404a2b1249735e8eb5a5d07003dfd95932 Mon Sep 17 00:00:00 2001
From: halworsen <mwh@halvorsenfamilien.com>
Date: Sat, 11 Nov 2017 17:21:04 +0100
Subject: [PATCH] Only show buttons for admin pages you can access

---
 www/admin/index.php | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/www/admin/index.php b/www/admin/index.php
index 9b753e2..a33af7f 100644
--- a/www/admin/index.php
+++ b/www/admin/index.php
@@ -13,7 +13,11 @@ $as->requireAuth();
 $attrs = $as->getAttributes();
 $uname = $attrs['uid'][0];
 
-if(!($userManager->isAdmin($uname) | $userManager->hasGroup($uname, 'prosjekt') | $userManager->hasGroup($uname, 'aktiviteter'))){
+$isAdmin = $userManager->isAdmin($uname);
+$projectGroup = $userManager->hasGroup($uname, 'prosjekt');
+$activityGroup = $userManager->hasGroup($uname, 'aktiviteter');
+
+if(!($isAdmin | $projectGroup | $activityGroup)){
 	echo 'Ingen tilgang';
 	exit();
 }
@@ -31,8 +35,19 @@ if(!($userManager->isAdmin($uname) | $userManager->hasGroup($uname, 'prosjekt')
 
 <article>
 	<h2>Verktøy</h2>
-	<a class="btn adminbtn" href="aktiviteter/?page=1">Aktiviteter/Hendelser</a>
-	<a class="btn adminbtn" href="prosjekter/">Prosjekter</a>
+	<?php
+		if($isAdmin | $activityGroup){
+			echo '<a class="btn adminbtn" href="aktiviteter/?page=1">Aktiviteter/Hendelser</a>';
+		}
+
+		if($isAdmin | $projectGroup){
+			echo '<a class="btn adminbtn" href="prosjekter/">Prosjekter</a>';
+		}
+
+		if($isAdmin){
+			echo '<a class="btn adminbtn" href="brukere/">Brukere</a>';
+		}
+	?>
 </article>
 
 </main>