diff --git a/pandora_console/extensions/api_checker.php b/pandora_console/extensions/api_checker.php index c6ccd3e4cc..6aecf21073 100755 --- a/pandora_console/extensions/api_checker.php +++ b/pandora_console/extensions/api_checker.php @@ -54,6 +54,15 @@ function api_execute($url, $ip, $pandora_url, $apipass, $user, $password, $op, $ function extension_api_checker() { global $config; + check_login (); + + if (! check_acl ($config['id_user'], 0, "PM")) { + db_pandora_audit("ACL Violation", + "Trying to access Profile Management"); + require ("general/noaccess.php"); + return; + } + $url = io_safe_output(get_parameter('url', '')); $ip = io_safe_output(get_parameter('ip', '127.0.0.1')); diff --git a/pandora_console/extensions/net_tools.php b/pandora_console/extensions/net_tools.php index b094a6ea3b..1049bc5e81 100644 --- a/pandora_console/extensions/net_tools.php +++ b/pandora_console/extensions/net_tools.php @@ -256,6 +256,15 @@ function main_net_tools () { function godmode_net_tools() { global $config; + check_config (); + + if (! check_acl ($config['id_user'], 0, "PM")) { + db_pandora_audit("ACL Violation", + "Trying to access Profile Management"); + require ("general/noaccess.php"); + return; + } + ui_print_page_header (__('Config Network Tools')); $update_traceroute = (bool)get_parameter('update_traceroute', 0);