From 4c67c50373f5f0474aeee855960312c94761910b Mon Sep 17 00:00:00 2001
From: Akita Noek <anoek@ansible.com>
Date: Mon, 11 Jul 2016 14:42:01 -0400
Subject: [PATCH] Allow system auditors to see notification templates and
 management jobs in the UI

---
 awx/ui/client/src/app.js                                    | 1 +
 awx/ui/client/src/login/loginModal/loginModal.controller.js | 1 +
 awx/ui/client/src/setup-menu/setup-menu.partial.html        | 4 ++--
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/awx/ui/client/src/app.js b/awx/ui/client/src/app.js
index 2229f4ca77..ab39dd8415 100644
--- a/awx/ui/client/src/app.js
+++ b/awx/ui/client/src/app.js
@@ -880,6 +880,7 @@ var tower = angular.module('Tower', [
                     }
                     // If browser refresh, set the user_is_superuser value
                     $rootScope.user_is_superuser = Authorization.getUserInfo('is_superuser');
+                    $rootScope.user_is_system_auditor = Authorization.getUserInfo('is_system_auditor');
                     // state the user refreshes we want to open the socket, except if the user is on the login page, which should happen after the user logs in (see the AuthService module for that call to OpenSocket)
                     if(!_.contains($location.$$url, '/login')){
                         ConfigService.getConfig().then(function(){
diff --git a/awx/ui/client/src/login/loginModal/loginModal.controller.js b/awx/ui/client/src/login/loginModal/loginModal.controller.js
index c87aafba41..9bd5132ab1 100644
--- a/awx/ui/client/src/login/loginModal/loginModal.controller.js
+++ b/awx/ui/client/src/login/loginModal/loginModal.controller.js
@@ -137,6 +137,7 @@ export default ['$log', '$cookieStore', '$compile', '$window', '$rootScope',
                     $rootScope.sessionTimer = timer;
                     $rootScope.$emit('OpenSocket');
                     $rootScope.user_is_superuser = data.results[0].is_superuser;
+                    $rootScope.user_is_system_auditor = data.results[0].is_system_auditor;
                     scope.$emit('AuthorizationGetLicense');
                 });
             })
diff --git a/awx/ui/client/src/setup-menu/setup-menu.partial.html b/awx/ui/client/src/setup-menu/setup-menu.partial.html
index ae1cdb0ee2..fc9a04d4ed 100644
--- a/awx/ui/client/src/setup-menu/setup-menu.partial.html
+++ b/awx/ui/client/src/setup-menu/setup-menu.partial.html
@@ -24,7 +24,7 @@
               Add passwords, SSH keys, etc. for Tower to use when launching jobs against machines, or when syncing inventories or projects.
             </p>
         </a>
-        <a ui-sref="managementJobsList" class="SetupItem" ng-if="user_is_superuser">
+        <a ui-sref="managementJobsList" class="SetupItem" ng-if="user_is_superuser || user_is_system_auditor">
             <h4 class="SetupItem-title">Management Jobs</h4>
             <p class="SetupItem-description">
                 Manage the cleanup of old job history, activity streams, data marked for deletion, and system tracking info.
@@ -37,7 +37,7 @@
             </p>
         </a>
         <a ui-sref="notifications" class="SetupItem"
-            ng-if="orgAdmin">
+            ng-if="orgAdmin || user_is_system_auditor || user_is_superuser">
             <h4 class="SetupItem-title">Notifications</h4>
             <p class="SetupItem-description">
             Create templates for sending notifications with Email, HipChat, Slack, and SMS.