From 049eb581d3169f87b167bb99de5ed3af1c7bcab3 Mon Sep 17 00:00:00 2001
From: Ted Trask <ttrask01@yahoo.com>
Date: Fri, 9 Sep 2011 20:49:31 +0000
Subject: Check permissions before displaying download buttons

---
 weblog-adhocquery-html.lsp | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'weblog-adhocquery-html.lsp')

diff --git a/weblog-adhocquery-html.lsp b/weblog-adhocquery-html.lsp
index 69feb37..2923005 100644
--- a/weblog-adhocquery-html.lsp
+++ b/weblog-adhocquery-html.lsp
@@ -33,12 +33,14 @@ require("viewfunctions")
 		<% end %>
 		</TABLE>
 
+		<% if viewlibrary.check_permission("downloadadhocquery") then %>
 		<form action="/cgi-bin/acf/weblog/weblog/downloadadhocquery" method="POST">
 		<input class="hidden" type="hidden"  name="query"  value="<%= html.html_escape(form.value.query.value) %>" >
 		<DL>
 		<DT>Download query result</DT><DD><input class="submit" type="submit" name="Download" value="Download"></DD>
 		</DL>
 		</FORM>
+		<% end %>
 	<% end %>
 <% end %>
 
-- 
cgit v1.2.3