From b66bac774661851c3d83e7283e9e97822d3f75be Mon Sep 17 00:00:00 2001
From: Ilya Prokopenko <dsrev@protonmail.com>
Date: Sat, 11 Sep 2021 23:11:06 +0700
Subject: [PATCH] Admin: show the login as button only with certain rights

---
 Web/Presenters/templates/Admin/Users.xml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/Web/Presenters/templates/Admin/Users.xml b/Web/Presenters/templates/Admin/Users.xml
index 9b25a62b..b9fd4751 100644
--- a/Web/Presenters/templates/Admin/Users.xml
+++ b/Web/Presenters/templates/Admin/Users.xml
@@ -49,9 +49,11 @@
                     <a class="aui-button aui-button-primary" href="/admin/users/id{$user->getId()}">
                         <span class="aui-icon aui-icon-small aui-iconfont-new-edit">Редактировать</span>
                     </a>
-                    <a class="aui-button" href="/setSID/{$user->getChandlerUser()->getId()}?hash={rawurlencode($csrfToken)}">
-                        <span class="aui-icon aui-icon-small aui-iconfont-sign-in">Войти как</span>
-                    </a>
+                    {if $thisUser->getChandlerUser()->can("substitute")->model('openvk\Web\Models\Entities\User')->whichBelongsTo(0)}
+                        <a class="aui-button" href="/setSID/{$user->getChandlerUser()->getId()}?hash={rawurlencode($csrfToken)}">
+                            <span class="aui-icon aui-icon-small aui-iconfont-sign-in">Войти как</span>
+                        </a>
+                    {/if}
                 </td>
             </tr>
         </tbody>