From 4bca0b5934739a05780795652bd085c9c289d70d Mon Sep 17 00:00:00 2001
From: mindless <mindless@71c3de6d-444a-0410-be80-ed276b4c234a>
Date: Fri, 2 Jan 2009 22:48:40 +0000
Subject: [PATCH] [FIXED HUDSON-910] Add permission check for newJob and
 newView pages.

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@14113 71c3de6d-444a-0410-be80-ed276b4c234a
---
 core/src/main/resources/hudson/model/Hudson/newView.jelly | 2 +-
 core/src/main/resources/hudson/model/View/newJob.jelly    | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/core/src/main/resources/hudson/model/Hudson/newView.jelly b/core/src/main/resources/hudson/model/Hudson/newView.jelly
index 24f03fe3d3..a3a43d57b4 100644
--- a/core/src/main/resources/hudson/model/Hudson/newView.jelly
+++ b/core/src/main/resources/hudson/model/Hudson/newView.jelly
@@ -2,7 +2,7 @@
   New View page
 -->
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
-  <l:layout norefresh="true">
+  <l:layout norefresh="true" permission="${app.primaryView.CREATE}">
     <st:include page="sidepanel.jelly" />
 
     <l:main-panel>
diff --git a/core/src/main/resources/hudson/model/View/newJob.jelly b/core/src/main/resources/hudson/model/View/newJob.jelly
index b8e557dc48..7d030b96d2 100644
--- a/core/src/main/resources/hudson/model/View/newJob.jelly
+++ b/core/src/main/resources/hudson/model/View/newJob.jelly
@@ -2,7 +2,8 @@
   "New Project" page.
 -->
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
-	<l:layout norefresh="true">
+	<j:getStatic var="permission" className="hudson.model.Item" field="CREATE"/>
+	<l:layout norefresh="true" permission="${permission}">
 		<st:include page="sidepanel.jelly" />
 		<l:main-panel>
 		  <s:form method="post" action="createItem">
-- 
GitLab