From 429a00f4397a05a24b32f3fa43278ef757d83840 Mon Sep 17 00:00:00 2001
From: Flavio Copes <copesc@gmail.com>
Date: Thu, 26 May 2016 18:17:23 +0200
Subject: [PATCH] Fix #553 Allow more restrictions on configuration

In addition to `admin.configuration`, which shows the configuration
sidebar menu, it now accepts `admin.configuration_system`,
`admin.configuration_site`, `admin.configuration_info` and same for all
the configuration panels you have set, by appending the slug to
`admin.configuration_`
---
 themes/grav/templates/config.html.twig | 42 +++++++++++++++++---------
 1 file changed, 27 insertions(+), 15 deletions(-)

diff --git a/themes/grav/templates/config.html.twig b/themes/grav/templates/config.html.twig
index 8fd49d77..f8b1366e 100644
--- a/themes/grav/templates/config.html.twig
+++ b/themes/grav/templates/config.html.twig
@@ -10,7 +10,7 @@
 {% endif %}
 
 {% block stylesheets %}
-    {% do assets.addCss(theme_url~'/css/codemirror/codemirror.css') %}
+    {% do assets.addCss(theme_url ~ '/css/codemirror/codemirror.css') %}
     {{ parent() }}
 {% endblock %}
 
@@ -29,45 +29,57 @@
 {% block content_top %}
     <div class="alert notice">{{ "PLUGIN_ADMIN.SAVE_LOCATION"|tu }}: <b>{{ data.file.filename|replace({(base_path):''}) }}</b></div>
     <ul class="tab-bar">
+
+        {% if authorize(['admin.configuration_system', 'admin.super']) %}
         <li {% if config_slug == 'system' %}class="active"{% endif %}>
             {% if config_slug == 'system' %}<span>{% else %}<a href="{{ base_url_relative }}/config/system">{% endif %}
             {{ "PLUGIN_ADMIN.SYSTEM"|tu }}
             {% if config_slug == 'system' %}</span>{% else %}</a>{% endif %}
         </li>
+        {% endif %}
+
+        {% if authorize(['admin.configuration_site', 'admin.super']) %}
         <li {% if config_slug == 'site' %}class="active"{% endif %}>
             {% if config_slug == 'site' %}<span>{% else %}<a href="{{ base_url_relative }}/config/site">{% endif %}
             {{ "PLUGIN_ADMIN.SITE"|tu }}
             {% if config_slug == 'site' %}</span>{% else %}</a>{% endif %}
         </li>
+        {% endif %}
 
         {% for configuration in admin.configurations %}
-            {% set current_blueprints = admin.data('config/' ~ configuration).blueprints.toArray() %}
-            {% if configuration != 'system' and configuration != 'site' and not current_blueprints.form.hidden and current_blueprints.form.fields is not empty %}
-                <li {% if config_slug == configuration %}class="active"{% endif %}>
-                    {% if config_slug == configuration %}<span>{% else %}<a href="{{ base_url_relative }}/config/{{configuration}}">{% endif %}
-                    {{ configuration|tu|capitalize }}
-                    {% if config_slug == configuration %}</span>{% else %}</a>{% endif %}
-                </li>
+            {% if authorize(['admin.configuration_' ~ configuration, 'admin.super']) %}
+                {% set current_blueprints = admin.data('config/' ~ configuration).blueprints.toArray() %}
+                {% if configuration != 'system' and configuration != 'site' and not current_blueprints.form.hidden and current_blueprints.form.fields is not empty %}
+                    <li {% if config_slug == configuration %}class="active"{% endif %}>
+                        {% if config_slug == configuration %}<span>{% else %}<a href="{{ base_url_relative }}/config/{{configuration}}">{% endif %}
+                        {{ configuration|tu|capitalize }}
+                        {% if config_slug == configuration %}</span>{% else %}</a>{% endif %}
+                    </li>
+                {% endif %}
             {% endif %}
         {% endfor %}
 
+        {% if authorize(['admin.configuration_info', 'admin.super']) %}
         <li {% if config_slug == 'info' %}class="active"{% endif %}>
             {% if config_slug == 'info' %}<span>{% else %}<a href="{{ base_url_relative }}/config/info">{% endif %}
             {{ "PLUGIN_ADMIN.INFO"|tu }}
             {% if config_slug == 'info' %}</span>{% else %}</a>{% endif %}
         </li>
+        {% endif %}
+
     </ul>
 {% endblock %}
 
 {% block content %}
-    {% if isInfo %}
-        <div id="phpinfo">
-            {{ admin.phpinfo|raw }}
-        </div>
-    {% else %}
-        {% include 'partials/blueprints.html.twig' with { blueprints: data.blueprints, data: data } %}
+    {% if authorize(['admin.configuration_' ~ config_slug, 'admin.super']) %}
+        {% if isInfo %}
+            <div id="phpinfo">
+                {{ admin.phpinfo|raw }}
+            </div>
+        {% else %}
+            {% include 'partials/blueprints.html.twig' with { blueprints: data.blueprints, data: data } %}
+        {% endif %}
     {% endif %}
-
     {% include 'partials/modal-changes-detected.html.twig' %}
 {% endblock %}