before_filter

1 files changed, 10 insertions, 0 deletions

diff --git a/app/controllers/evaluation/pool.php b/app/controllers/evaluation/pool.php
index 5e01fd6..6b25e32 100644
--- a/app/controllers/evaluation/pool.php
+++ b/app/controllers/evaluation/pool.php
@@ -1,6 +1,16 @@
 <?php
 class Evaluation_PoolController extends AuthenticatedController
 {
+    public function before_filter(&$action, &$args)
+    {
+        parent::before_filter($action, $args);
+        $current_user = User::findCurrent();
+        if (!($current_user->hasPermissionLevel('root') ||
+            $current_user->hasRole('Zentraler Evaluationsadmin'))) {
+            throw new AccessDeniedException();
+        }
+    }
+
     public function index_action()
     {
         Navigation::activateItem('/evaluation/pool');