* [bug#58385] adjust priv check for instance.

config/zentaopms.php

@@ -303,6 +303,8 @@ $config->logonMethods[] = 'instance.manualbackup';
 $config->logonMethods[] = 'instance.backupsettings';
 $config->logonMethods[] = 'instance.autobackup';
 $config->logonMethods[] = 'instance.ajaxRestore';
+$config->logonMethods[] = 'instance.showLogs';
+$config->logonMethods[] = 'instance.events';
 $config->logonMethods[] = 'jenkins.create';
 $config->logonMethods[] = 'jenkins.edit';
 $config->logonMethods[] = 'kanban.activatecard';

module/instance/model.php

@@ -1067,6 +1067,8 @@ class instanceModel extends model
             return false;
         }
 
+        if(!common::hasPriv('instance', 'manage')) return false;
+
         if($action == 'ajaxStart')     return $this->canDo('start', $instance);
         if($action == 'ajaxStop')      return $this->canDo('stop', $instance);
         if($action == 'ajaxUninstall') return $this->canDo('uninstall', $instance);