From 85b18eec05f975611a6f8395e021c8bab54c5848 Mon Sep 17 00:00:00 2001
From: Mads Rasmussen <mads@umbraco.com>
Date: Mon, 6 Aug 2018 10:47:20 +0200
Subject: [PATCH] only allow to open template if user has access to settings
 section

---
 .../components/content/umbcontentnodeinfo.directive.js          | 2 ++
 .../src/views/components/content/umb-content-node-info.html     | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/Umbraco.Web.UI.Client/src/common/directives/components/content/umbcontentnodeinfo.directive.js b/src/Umbraco.Web.UI.Client/src/common/directives/components/content/umbcontentnodeinfo.directive.js
index 78d6eda0f2..5f9f1f4a36 100644
--- a/src/Umbraco.Web.UI.Client/src/common/directives/components/content/umbcontentnodeinfo.directive.js
+++ b/src/Umbraco.Web.UI.Client/src/common/directives/components/content/umbcontentnodeinfo.directive.js
@@ -12,6 +12,7 @@
 
             scope.disableTemplates = Umbraco.Sys.ServerVariables.features.disabledFeatures.disableTemplates;
             scope.allowChangeDocumentType = false;
+            scope.allowChangeTemplate = false;
             
             function onInit() {
 
@@ -20,6 +21,7 @@
                         angular.forEach(user.sections, function(section){
                             if(section.alias === "settings") {
                                 scope.allowChangeDocumentType = true;
+                                scope.allowChangeTemplate = true;
                             }
                         });
                     });
diff --git a/src/Umbraco.Web.UI.Client/src/views/components/content/umb-content-node-info.html b/src/Umbraco.Web.UI.Client/src/views/components/content/umb-content-node-info.html
index ac38761010..498134d6e0 100644
--- a/src/Umbraco.Web.UI.Client/src/views/components/content/umb-content-node-info.html
+++ b/src/Umbraco.Web.UI.Client/src/views/components/content/umb-content-node-info.html
@@ -197,7 +197,7 @@
                                 ng-change="updateTemplate(node.template)">
                             <option value=""><localize key="general_choose">Choose</localize>...</option>
                         </select>
-                        <a href="" class="umb-node-preview__action" style="margin-left:15px;" ng-click="openTemplate()" ng-if="node.template !== null">
+                        <a href="" ng-if="allowChangeTemplate" class="umb-node-preview__action" style="margin-left:15px;" ng-click="openTemplate()" ng-if="node.template !== null">
                             <localize key="general_open">Open</localize>
                         </a>
                     </div>