luci-mod-system: password.js: make readonly on insufficient ACLs

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

1 files changed, 2 insertions, 0 deletions

diff --git a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/password.js b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/password.js
index 2b79633cac..f3275606ce 100644
--- a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/password.js
+++ b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/password.js
@@ -44,6 +44,8 @@ return view.extend({
 		var m, s, o;
 
 		m = new form.JSONMap(formData, _('Router Password'), _('Changes the administrator password for accessing the device'));
+		m.readonly = !L.hasViewPermission();
+
 		s = m.section(form.NamedSection, 'password', 'password');
 
 		o = s.option(form.Value, 'pw1', _('Password'));