Module: check_mk
Branch: master
Commit: e1bb2cb34649366567ab0d3193aada1a8560336c
URL:
http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=e1bb2cb3464936…
Author: Lars Michelsen <lm(a)mathias-kettner.de>
Date: Fri Feb 17 11:02:24 2017 +0100
4376 FIX WATO Web-API: Is now disabled when WATO is disabled on a site (e.g. slave sites)
Change-Id: I7934c4ea0cca1b7858735c6121d4ab5e14812be1
---
.werks/4376 | 10 ++++++++++
web/htdocs/webapi.py | 3 +++
2 files changed, 13 insertions(+)
diff --git a/.werks/4376 b/.werks/4376
new file mode 100644
index 0000000..9f970a0
--- /dev/null
+++ b/.werks/4376
@@ -0,0 +1,10 @@
+Title: WATO Web-API: Is now disabled when WATO is disabled on a site (e.g. slave sites)
+Level: 1
+Component: wato
+Class: fix
+Compatible: compat
+State: unknown
+Version: 1.5.0i1
+Date: 1487325643
+
+
diff --git a/web/htdocs/webapi.py b/web/htdocs/webapi.py
index d109c9e..a8cfd03 100644
--- a/web/htdocs/webapi.py
+++ b/web/htdocs/webapi.py
@@ -71,6 +71,9 @@ def page_api():
if not config.user.get_attribute("automation_secret"):
raise MKAuthException("The WATO API is only available for automation
users")
+ if not config.wato_enabled:
+ raise MKUserError(None, _("WATO is disabled on this site."))
+
config.user.need_permission("wato.use")
config.user.need_permission("wato.api_allowed")