diff options
| author | Simon Rettberg | 2019-10-21 10:52:59 +0200 |
|---|---|---|
| committer | Simon Rettberg | 2019-10-21 10:52:59 +0200 |
| commit | c8757aa682bc2462feb45e556180c87a11c5e5d5 (patch) | |
| tree | ab48b4fe36e04fe4a3a2deed47aa8f700d3039b1 | |
| parent | [inc/Util] Simplify user download function (diff) | |
| download | slx-admin-c8757aa682bc2462feb45e556180c87a11c5e5d5.tar.gz slx-admin-c8757aa682bc2462feb45e556180c87a11c5e5d5.tar.xz slx-admin-c8757aa682bc2462feb45e556180c87a11c5e5d5.zip | |
[minilinux] Add missing permissions checks
| -rw-r--r-- | modules-available/minilinux/page.inc.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/modules-available/minilinux/page.inc.php b/modules-available/minilinux/page.inc.php index 7c7e3d36..11998aad 100644 --- a/modules-available/minilinux/page.inc.php +++ b/modules-available/minilinux/page.inc.php @@ -252,6 +252,7 @@ class Page_MiniLinux extends Page private function updateSources() { + User::assertPermission('view'); // As it doesn't really change anything, accept view permission $ret = MiniLinux::updateList(); if ($ret > 0) { sleep(2); @@ -261,6 +262,7 @@ class Page_MiniLinux extends Page private function setDefault() { + User::assertPermission('update'); $versionid = Request::post('version', false, 'string'); if ($versionid === false) { Message::addError('main.parameter-missing', 'versionid'); |