From 570f8d94403a576dcdb5a68c50d4fd5695d1b37b Mon Sep 17 00:00:00 2001 From: Thomas Gelf Date: Wed, 2 Dec 2015 03:35:01 +0100 Subject: [PATCH] ObjectsController: add sample permission check --- library/Director/Web/Controller/ObjectsController.php | 1 + 1 file changed, 1 insertion(+) diff --git a/library/Director/Web/Controller/ObjectsController.php b/library/Director/Web/Controller/ObjectsController.php index a926d90e..0e9771e8 100644 --- a/library/Director/Web/Controller/ObjectsController.php +++ b/library/Director/Web/Controller/ObjectsController.php @@ -62,6 +62,7 @@ abstract class ObjectsController extends ActionController { $type = $this->getType(); $ltype = strtolower($type); + $this->assertPermission('director/' . $type . 's/read'); $dummy = $this->dummyObject(); if (! in_array($type, $this->globalTypes)) {