Fixed access permission to provider config

edgardmessias · Jan 20, 2021 · 1937c6c · 1937c6c
1 parent 846052d
commit 1937c6c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/front/provider.form.php b/front/provider.form.php
@@ -4,6 +4,8 @@
 
 include ('../../../inc/includes.php');
 
+Session::checkRight("config", UPDATE);
+
 if (!isset($_GET["id"])) {
    $_GET["id"] = "";
 }

diff --git a/front/provider.php b/front/provider.php
@@ -2,6 +2,8 @@
 
 include ('../../../inc/includes.php');
 
+Session::checkRight("config", UPDATE);
+
 if ($_SESSION["glpiactiveprofile"]["interface"] == "central") {
    Html::header(__sso('Single Sign-on'), $_SERVER['PHP_SELF'], "config", "pluginsinglesignonprovider", "");
 } else {