Skip to content

Commit

Permalink
NOJIRA Add access restrictions rules for UI and screen editor
Browse files Browse the repository at this point in the history
Turns out previously you could actually guess the URL for a UI or a
screen and edit it, even if you didn't have the rights.
  • Loading branch information
Stefan committed Aug 18, 2015
1 parent 53e4ad9 commit 10b0316
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions app/conf/access_restrictions.conf
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,16 @@ access_restrictions = {
actions = { can_configure_user_interfaces }
}
},
administrate/setup/interface_editor/InterfaceEditorController = {
default = {
actions = { can_configure_user_interfaces }
}
},
administrate/setup/interface_screen_editor/InterfaceScreenEditorController = {
default = {
actions = { can_configure_user_interfaces }
}
},
administrate/setup/list_editor/ListEditorController = {
default = {
operator = OR,
Expand Down

0 comments on commit 10b0316

Please sign in to comment.