permissiocheckit on kivoja

code/moya-web/src/main/java/fi/codecrew/moya/web/cdiview/eticket/EticketView.java

@@ -19,7 +19,9 @@
 package fi.codecrew.moya.web.cdiview.eticket;
 
 import fi.codecrew.moya.beans.*;
+import fi.codecrew.moya.enums.apps.BillPermission;
 import fi.codecrew.moya.enums.apps.MapPermission;
+import fi.codecrew.moya.enums.apps.UserPermission;
 import fi.codecrew.moya.model.EventUser;
 import fi.codecrew.moya.model.GroupMembership;
 import fi.codecrew.moya.model.Place;
@@ -30,6 +32,7 @@ import fi.codecrew.moya.web.cdiview.shop.InviteView;
 import fi.codecrew.moya.web.cdiview.user.UserView;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
+import sun.net.ftp.FtpDirEntry;
 
 import javax.ejb.EJB;
 import javax.enterprise.context.ConversationScoped;
@@ -92,10 +95,14 @@ public class EticketView extends GenericCDIView {
 
 
 	public void initView() {
-		List<GroupMembership> gmlist = ticketBean.findMembershipPrintlistForUser(userView.getSelectedUser());
 
-		if(gmlist == null || gmlist.size() <= 0)
-			super.navihandler.forward("/shop/createBill?faces-redirect=true");
+		if(requirePermissions(BillPermission.VIEW_OWN)) {
+
+			List<GroupMembership> gmlist = ticketBean.findMembershipPrintlistForUser(userView.getSelectedUser());
+
+			if (gmlist == null || gmlist.size() <= 0)
+				super.navihandler.forward("/shop/createBill?faces-redirect=true");
+		}
 	}
 	
 	public ListDataModel<GroupMembership> getGroupMemberships() {