Show cancel/kill actions in process page only if role is a superuser.

diff --git a/database.php b/database.php
index 290d2a0a6c75fa7228aefc16d0ba844967613ea3..e20e67ea245e9d8b503742f6fcc615d2807266b6 100755 (executable)
--- a/database.php
+++ b/database.php
@@ -457,23 +457,26 @@
 
                // Build possible actions for our process list
                $columns['actions'] = array('title' => $lang['stractions']);
-                       
-               $actions = array(
-                       'cancel' => array(
-                               'title' => $lang['strcancel'],
-                               'url'   => "database.php?action=signal&signal=CANCEL&{$misc->href}&",
-                               'vars'  => array('procpid' => 'procpid')
-                       ),
-                       'kill' => array(
-                               'title' => $lang['strkill'],
-                               'url'   => "database.php?action=signal&signal=KILL&{$misc->href}&",
-                               'vars'  => array('procpid' => 'procpid')
-                       )
-               );
+
+               $actions = array();
+               if ($data->isSuperUser()) {
+                       $actions = array(
+                               'cancel' => array(
+                                       'title' => $lang['strcancel'],
+                                       'url'   => "database.php?action=signal&signal=CANCEL&{$misc->href}&",
+                                       'vars'  => array('procpid' => 'procpid')
+                               ),
+                               'kill' => array(
+                                       'title' => $lang['strkill'],
+                                       'url'   => "database.php?action=signal&signal=KILL&{$misc->href}&",
+                                       'vars'  => array('procpid' => 'procpid')
+                               )
+                       );
        
-               // Remove actions where not supported
-               if (!$data->hasQueryKill()) unset($actions['kill']);
-               if (!$data->hasQueryCancel()) unset($actions['cancel']);
+                       // Remove actions where not supported
+                       if (!$data->hasQueryKill()) unset($actions['kill']);
+                       if (!$data->hasQueryCancel()) unset($actions['cancel']);
+               }
 
                if (count($actions) == 0) unset($columns['actions']);