Added check login and check acl in update_manager.ajax

2018-05-09 11:37:53 +02:00 · 2018-05-09 11:37:53 +02:00 · 3c7fe95a33
parent 931c41698b
commit 3c7fe95a33
1 changed files with 8 additions and 0 deletions
--- a/pandora_console/include/ajax/update_manager.ajax.php
+++ b/pandora_console/include/ajax/update_manager.ajax.php
@ -15,6 +15,14 @@

 global $config;

+check_login ();
+
+if (! check_acl ($config['id_user'], 0, "PM") && ! is_user_admin ($config['id_user'])) {
+	db_pandora_audit("ACL Violation", "Trying to access update Management");
+	require ("general/noaccess.php");
+	return;
+}
+
 require_once($config['homedir'] . "/include/functions_update_manager.php");
 require_once($config['homedir'] . "/include/functions_graph.php");
 enterprise_include_once("include/functions_update_manager.php");