From 41c50622650d8dfe47687687c77efaed0d0d085f Mon Sep 17 00:00:00 2001
From: Hao Sun <sunhao@easycorp.ltd>
Date: Tue, 7 Sep 2021 16:37:58 +0800
Subject: [PATCH] * bug #14844, only show tutorial tasks that the user has
 permission access.

---
 module/tutorial/view/index.html.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/module/tutorial/view/index.html.php b/module/tutorial/view/index.html.php
index 0710bcd8ea..c69d510e94 100644
--- a/module/tutorial/view/index.html.php
+++ b/module/tutorial/view/index.html.php
@@ -61,7 +61,7 @@
       </div>
     </section>
     <section id='all'>
-      <h4><?php echo $lang->tutorial->allTasks;?> (<span class='task-num-finish'>2</span>/<span class='tasks-count'><?php echo count($lang->tutorial->tasks);?></span>)</h4>
+      <h4><?php echo $lang->tutorial->allTasks;?> (<span class='task-num-finish'></span>/<span class='tasks-count'></span>)</h4>
       <div class='progress' id='tasksProgress'>
         <div class='progress-text'></div>
         <div class='progress-bar' style='width: 0%'>
@@ -76,6 +76,7 @@
         <?php
         if(isset($task['mode']) && $task['mode'] != $mode) continue;
         $nav = $task['nav'];
+        if(!commonModel::hasPriv($nav['module'], $nav['method'])) continue;
         $task['name'] = $name;
         $task['id']   = ++$idx;
         $task['url']  = helper::createLink($nav['module'], $nav['method'], isset($nav['vars']) ? $nav['vars'] : '', 'tutorial');