From aa6b0ec6fe9d96698dd08a55e23c76148565dfa8 Mon Sep 17 00:00:00 2001
From: Ylian Saint-Hilaire <ysainthilaire@hotmail.com>
Date: Tue, 14 Dec 2021 15:09:25 -0800
Subject: [PATCH] Fixed power control access on web pages.

---
 views/default-mobile.handlebars | 8 ++++----
 views/default.handlebars        | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/views/default-mobile.handlebars b/views/default-mobile.handlebars
index 9ae89bf1..275d7838 100644
--- a/views/default-mobile.handlebars
+++ b/views/default-mobile.handlebars
@@ -3522,15 +3522,15 @@
                 x += '<input type=button value="' + "Notes" + '" onclick=showNotes(' + ((meshrights & 128) == 0) + ',"' + encodeURIComponent(node._id) + '") />';
                 //if ((connectivity & 1) && (meshrights & 8) && (node.agent.id < 5)) { x += '<input type=button value=Toast onclick=deviceToastFunction() />';  }
 
-                if ((node.mtype == 4) && (meshrights & 8) && (connectivity & 1)) {
+                if ((node.mtype == 4) && (connectivity & 1)) {
                     if (node.porttype == 'PDU') {
                         if (node.pwr == 1) {
-                            x += '<input type=button value="' + "Turn off" + '" title="' + "Turn off" + '" onclick=setIpPduState(0) />';
+                            if (meshrights & 0x40000) { x += '<input type=button value="' + "Turn off" + '" title="' + "Turn off" + '" onclick=setIpPduState(0) />'; }
                         } else if (node.pwr == 8) {
-                            x += '<input type=button value="' + "Turn on" + '" title="' + "Turn on" + '" onclick=setIpPduState(1) />';
+                            if (meshrights & 0x40) { x += '<input type=button value="' + "Turn on" + '" title="' + "Turn on" + '" onclick=setIpPduState(1) />'; }
                         }
                     } else {
-                        x += '<input type=button value="' + "Remote Control" + '" title="' + "Remote Control" + '" onclick=openIpKvmRemoteControl("' + encodeURIComponentEx(node._id) + '") />';
+                        if (meshrights & 8) { x += '<input type=button value="' + "Remote Control" + '" title="' + "Remote Control" + '" onclick=openIpKvmRemoteControl("' + encodeURIComponentEx(node._id) + '") />'; }x
                     }
                 }
 
diff --git a/views/default.handlebars b/views/default.handlebars
index d4513593..fa8e6415 100644
--- a/views/default.handlebars
+++ b/views/default.handlebars
@@ -6902,15 +6902,15 @@
                         QV('DeskGuestShareButton', false);
                     }
                 }
-                if ((node.mtype == 4) && (meshrights & 8) && (connectivity & 1)) {
+                if ((node.mtype == 4) && (connectivity & 1)) {
                     if (node.porttype == 'PDU') {
                         if (node.pwr == 1) {
-                            x += '<input type=button value="' + "Turn off" + '" title="' + "Turn off" + '" onclick=setIpPduState(0) />';
+                            if (meshrights & 0x40000) { x += '<input type=button value="' + "Turn off" + '" title="' + "Turn off" + '" onclick=setIpPduState(0) />'; }
                         } else if (node.pwr == 8) {
-                            x += '<input type=button value="' + "Turn on" + '" title="' + "Turn on" + '" onclick=setIpPduState(1) />';
+                            if (meshrights & 0x40) { x += '<input type=button value="' + "Turn on" + '" title="' + "Turn on" + '" onclick=setIpPduState(1) />'; }
                         }
                     } else {
-                        x += '<input type=button value="' + "Remote Control" + '" title="' + "Remote Control" + '" onclick=openIpKvmRemoteControl("' + encodeURIComponentEx(node._id) + '") />';
+                        if (meshrights & 8) { x += '<input type=button value="' + "Remote Control" + '" title="' + "Remote Control" + '" onclick=openIpKvmRemoteControl("' + encodeURIComponentEx(node._id) + '") />'; }
                     }
                 }