X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=bin%2Fmozilla%2Famtemplates.pl;h=1ef16c1eba371e726da90865e534a22156efecb2;hb=0aea1ede8f4e69d7677f93944f74e29eb5ce7aa4;hp=72e6500cba696404dc934100a9e0d5878d571fa0;hpb=9aaca43317d3ea33d80a308cab7ce4c20d732a16;p=kivitendo-erp.git

diff --git a/bin/mozilla/amtemplates.pl b/bin/mozilla/amtemplates.pl
index 72e6500cb..1ef16c1eb 100644
--- a/bin/mozilla/amtemplates.pl
+++ b/bin/mozilla/amtemplates.pl
@@ -57,6 +57,8 @@ sub edit {
 sub display_template {
   $lxdebug->enter_sub();
 
+  $auth->assert('config');
+
   $form->{edit} = 0;
   display_template_form();
 
@@ -66,6 +68,8 @@ sub display_template {
 sub edit_template {
   $lxdebug->enter_sub();
 
+  $auth->assert('config');
+
   $form->{edit} = 1;
   display_template_form();
 
@@ -75,6 +79,8 @@ sub edit_template {
 sub save_template {
   $lxdebug->enter_sub();
 
+  $auth->assert('config');
+
   $form->isblank("formname", $locale->text("You're not editing a file.")) unless ($form->{type} eq "stylesheet");
 
   my ($filename) = AM->prepare_template_filename(\%myconfig, $form);
@@ -91,6 +97,8 @@ sub save_template {
 sub display_template_form {
   $lxdebug->enter_sub();
 
+  $auth->assert('config');
+
   $form->{"formname"} =~ s|.*/||;
   my $format = $form->{"format"} eq "html" ? "html" : "tex";
 
@@ -98,7 +106,7 @@ sub display_template_form {
 
   my %options;
 
-  my @hidden = qw(login password type format);
+  my @hidden = qw(type format);
 
   if (($form->{"type"} ne "stylesheet") && !$form->{"edit"}) {
     $options{"SHOW_EDIT_OPTIONS"} = 1;