[Fixed JENKINS-15277] Check permissions before showing config page as…

… we did in all other cases
jenkinsci · Sep 22, 2012 · 452f4f1 · 452f4f1
1 parent 4c7e39d
commit 452f4f1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/src/main/resources/hudson/model/View/configure.jelly b/core/src/main/resources/hudson/model/View/configure.jelly
@@ -27,7 +27,7 @@ THE SOFTWARE.
 -->
 <?jelly escape-by-default='true'?>
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
-  <l:layout norefresh="true" title="${%Edit View}">
+  <l:layout norefresh="true" title="${%Edit View}" permission="${it.CONFIGURE}">
     <st:include page="sidepanel.jelly" />
     <l:main-panel>
       <!-- to make the form field binding work -->