API2 perslid authorisatie aangescherpt: voor PUT en POST is voortaan PRSMAN vereist

svn path=/Website/trunk/; revision=36901

APPL/API2/model_prs_perslid.inc

@@ -57,6 +57,8 @@ function model_prs_perslid(params)
     this.records_title = L("prs_perslid_m");
     this.autfunction = params.internal?false:"WEB_PRSSYS"; // we controleren zelf
 
+
+
     this.fields = {
         "id": {
             "dbs": "prs_perslid_key",
@@ -353,8 +355,11 @@ function model_prs_perslid(params)
             return generic_REST_POST(this)(params, jsondata, parent_key)
         }
 
-        this.REST_PUT    = generic_REST_PUT(this);
-        this.REST_DELETE = generic_REST_DELETE(this);
+        if (user.has("WEB_PRSMAN"))
+        {
+            this.REST_PUT    = generic_REST_PUT(this);
+            this.REST_DELETE = generic_REST_DELETE(this);
+        }
     }
 }
 %>