Close #229

Author: Open Lowcode SAS

src/org/openlowcode/server/action/SActionRef.java

@@ -21,6 +21,8 @@
 import org.openlowcode.server.graphic.widget.SObjectDisplay;
 import org.openlowcode.server.runtime.OLcServer;
 import org.openlowcode.server.runtime.SModule;
+import org.openlowcode.server.security.ActionSecurityManager;
+import org.openlowcode.server.security.SecurityBuffer;
 import org.openlowcode.tools.messages.MessageWriter;
 import org.openlowcode.tools.misc.Named;
 import org.openlowcode.tools.misc.NamedList;
@@ -271,4 +273,26 @@ public ActionExecution getAction() {
 	public SActionDataLoc<?> getActionData(String name) {
 		return actiondata.lookupOnName(name);
 	}
+	/**
+	 * @return true if the action is authorized, false if not
+	 * @since 1.12
+	 */
+	public boolean isAuthorized(String context,SPageData input, SecurityBuffer buffer) {
+		ActionSecurityManager[] securitymanagers = getAction().getActionSecurityManager();
+		if (securitymanagers == null) {
+			logger.info(" no security manager, hide = true");
+			return false;
+		}
+		if (buffer == null)
+			return true;
+		for (int i = 0; i < securitymanagers.length; i++) {
+			ActionSecurityManager thismanager = securitymanagers[i];
+			SActionData actiondata = this.generatePotentialActionDataForSecurity(input);
+			if (thismanager.isAuthorizedForCurrentUser(context, actiondata, buffer)) {
+				logger.info(" found security manager with authorization for user " + thismanager.toString());
+				return true;
+			}
+		}
+		return false;
+	}
 }

src/org/openlowcode/server/graphic/widget/SGrid.java

@@ -395,10 +395,14 @@ public void WritePayloadToCDL(MessageWriter writer, SPageData input, SecurityBuf
 		}
 		writer.startStructure("MENACTS");
 		for (int i=0;i<this.menuactions.size();i++) {
+			// checks that the action is visible
+			SActionRef thisaction = menuactions.get(i);						
+			if (thisaction.isAuthorized("Menu for SGrid "+this.name, input, buffer)) {
 			writer.startStructure("MENACT");
 			writer.addStringField("MENLBL",this.menuactionslabel.get(i));
-			this.menuactions.get(i).writeToCML(writer);
+			thisaction.writeToCML(writer);
 			writer.endStructure("MENACT");
+			}
 		}
 		writer.endStructure("MENACTS");
 	}