From 59d6f7de5415fbfa9c90484e45e4c0791073fdd9 Mon Sep 17 00:00:00 2001 From: "Alexander A. Klimov" Date: Wed, 20 Sep 2017 17:26:15 +0200 Subject: [PATCH] Secure /config/ refs #11 --- application/controllers/ConfigController.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/application/controllers/ConfigController.php b/application/controllers/ConfigController.php index 5cd0afe..1d176aa 100644 --- a/application/controllers/ConfigController.php +++ b/application/controllers/ConfigController.php @@ -7,6 +7,12 @@ use Icinga\Web\Controller; class ConfigController extends Controller { + public function init() + { + $this->assertPermission('config/modules'); + parent::init(); + } + public function indexAction() { $this->view->form = $form = new ConfigForm();