Module: check_mk Branch: master Commit: e1bb2cb34649366567ab0d3193aada1a8560336c URL: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=e1bb2cb3464936… Author: Lars Michelsen <lm(a)mathias-kettner.de> Date: Fri Feb 17 11:02:24 2017 +0100 4376 FIX WATO Web-API: Is now disabled when WATO is disabled on a site (e.g. slave sites) Change-Id: I7934c4ea0cca1b7858735c6121d4ab5e14812be1 --- .werks/4376 | 10 ++++++++++ web/htdocs/webapi.py | 3 +++ 2 files changed, 13 insertions(+) diff --git a/.werks/4376 b/.werks/4376 new file mode 100644 index 0000000..9f970a0 --- /dev/null +++ b/.werks/4376 @@ -0,0 +1,10 @@ +Title: WATO Web-API: Is now disabled when WATO is disabled on a site (e.g. slave sites) +Level: 1 +Component: wato +Class: fix +Compatible: compat +State: unknown +Version: 1.5.0i1 +Date: 1487325643 + + diff --git a/web/htdocs/webapi.py b/web/htdocs/webapi.py index d109c9e..a8cfd03 100644 --- a/web/htdocs/webapi.py +++ b/web/htdocs/webapi.py @@ -71,6 +71,9 @@ def page_api(): if not config.user.get_attribute("automation_secret"): raise MKAuthException("The WATO API is only available for automation users") + if not config.wato_enabled: + raise MKUserError(None, _("WATO is disabled on this site.")) + config.user.need_permission("wato.use") config.user.need_permission("wato.api_allowed")