Položky hlavního menu podmíněny právama na jednotlivé agendy.

Povel kontextové nápovědy podmíněn na práva na objednávky.

Proč ale stále skáče 403 u uživatele user1, který má práva na schválené
požadavky netuším.

refs #147

src/main/webapp/app/mainMenu.zul

@@ -16,20 +16,24 @@
 				<menuitem
 					image="/img/beam-032.png"
 					label="${labels.MaterialRequirements}"
-					href="/main/orders/material/" />
+					href="/main/orders/material/"
+					disabled="${not sec:isAllGranted('PERM_READ_MATERIAL')}" />
 				<menuitem
 					image="/img/worker-032.png"
 					label="${labels.ServiceRequirements}"
-					href="/main/orders/services/" />
+					href="/main/orders/services/"
+					disabled="${not sec:isAllGranted('PERM_READ_SERVICES')}" />
 				<menuseparator />
 				<menuitem
 					image="/img/hammer-016.png"
 					label="${labels.ApprovedRequirementItems}"
-					href="/main/orders/approved/" />
+					href="/main/orders/approved/"
+					disabled="${not sec:isAllGranted('PERM_READ_APPROVED')}" />
 				<menuitem
 					image="/img/autotruck-016.png"
 					label="${labels.CreatedOrders}"
-					href="/main/orders/created/" />
+					href="/main/orders/created/"
+					disabled="${not sec:isAllGranted('PERM_READ_ORDER')}" />
 			</menupopup>
 		</menu>
 		<menu label="${labels.BussinessTrips}">
@@ -37,11 +41,13 @@
 				<menuitem
 					image="/img/req-trip-016.png"
 					label="${labels.CurrentRequirements}"
-					href="/main/trips/requirements/" />
+					href="/main/trips/requirements/"
+					disabled="${not sec:isAllGranted('PERM_READ_TRIPREQUIREMENTS')}" />
 				<menuitem
 					image="/img/pickup-024.png"
 					label="${labels.TravelOrders}"
-					href="/main/trips/bill" />
+					href="/main/trips/bill"
+					disabled="${not sec:isAllGranted('PERM_READ_TRIPBILL')}" />
 			</menupopup>
 		</menu>
 		<menuseparator />
@@ -89,7 +95,7 @@
 				<menuitem
 					label="${labels.NumberSeries}…"
 					onClick="@command('numSeries')"
-					disabled="${not sec:isAllGranted('ROLE_ADMIN')}"/>
+					disabled="${not sec:isAllGranted('ROLE_ADMIN')}" />
 				<menu label="${labels.Administration}">
 					<menupopup>
 						<menuitem

src/main/webapp/main/orders/approved/grid.zul

@@ -1,4 +1,5 @@
 <?page title="${labels.ApprovedRequirementItems}" contentType="text/html;charset=UTF-8"?>
+<?taglib uri="/WEB-INF/security.tld" prefix="sec"?>
 <zk>
 	<?variable-resolver class="org.zkoss.zkplus.spring.DelegatingVariableResolver"?>
 	<window
@@ -277,7 +278,8 @@
 			<menuitem
 				image="/img/autotruck-016.png"
 				label="${labels.CreateOrder}..."
-				onClick="@command('onCreateOrder')" />
+				onClick="@command('onCreateOrder')"
+				disabled="${not sec:isAllGranted('PERM_READ_ORDER')}" />
 		</menupopup>
 	</window>
 </zk>