From 23dfb7d7194a74bb385edef7f426517d32e24d1b Mon Sep 17 00:00:00 2001
From: AIIrondev <iron.ai.dev@gmail.com>
Date: Mon, 14 Sep 2026 09:23:09 +0200
Subject: [PATCH] changes to the authentification

---
 Web/app.py              | 2 +-
 Web/templates/base.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Web/app.py b/Web/app.py
index 273df73..7753607 100755
--- a/Web/app.py
+++ b/Web/app.py
@@ -2188,7 +2188,7 @@ def _upload_student_cards_excel():
 
     current_permissions = us.get_effective_permissions(session['username'])
 
-    if not current_permissions['actions'].get('can_manage_user', False):
+    if not current_permissions['actions'].get('can_manage_users', False):
         flash('Ihnen fehlen die nötigen Berechtigungen, um diese Aktion auszuführen.', 'error')
         return redirect(url_for('library_view'))
 
diff --git a/Web/templates/base.html b/Web/templates/base.html
index cd3aaa5..174204b 100755
--- a/Web/templates/base.html
+++ b/Web/templates/base.html
@@ -1376,7 +1376,7 @@
                                 <li><a class="dropdown-item" href="{{ url_for('mahnungen_admin') }}">Mahnungen</a></li>
                                 {% endif %}
                                 {% if student_cards_module_enabled %}
-                                {% if current_permissions.actions.get('can_manage_users', False) %}
+                                {% if current_permissions.actions.get('can_manage_settings', False) %}
                                 <li><a class="dropdown-item" href="{{ url_for('student_cards_admin') }}">Bibliotheksausweis</a></li>
                                 {% endif %}
                                 {% endif %}