From 7b682ede291abd744027359f5498f32ff8fff378 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Laura=20Kl=C3=BCnder?= <laura@codingcatgirl.de>
Date: Mon, 2 Oct 2023 17:44:04 +0200
Subject: [PATCH] add missing control_panel permission check

---
 src/c3nav/control/views/base.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/c3nav/control/views/base.py b/src/c3nav/control/views/base.py
index 80518d51..982072bc 100644
--- a/src/c3nav/control/views/base.py
+++ b/src/c3nav/control/views/base.py
@@ -11,6 +11,8 @@ class ControlPanelMixin(UserPassesTestMixin, LoginRequiredMixin):
     user_permission = None
 
     def test_func(self):
+        if not self.request.user_permissions.control_panel:
+            return False
         if not self.user_permission:
             return True
         return getattr(self.request.user_permissions, self.user_permission)