Fix credential store ACL, only accces to PM or UM

2022-02-24 17:33:13 +01:00 · 2022-02-24 17:33:13 +01:00 · 4f3c509bde
parent 3f7067fe48
commit 4f3c509bde
1 changed files with 3 additions and 1 deletions
--- a/pandora_console/include/class/CredentialStore.class.php
+++ b/pandora_console/include/class/CredentialStore.class.php
@ -158,7 +158,9 @@ class CredentialStore extends Wizard
        // Check access.
        check_login();

-        if (! check_acl($config['id_user'], 0, 'AR')) {
+        if ((bool) check_acl($config['id_user'], 0, 'PM') === false
+            || (bool) check_acl($config['id_user'], 0, 'UM') === false
+        ) {
            db_pandora_audit(
                AUDIT_LOG_ACL_VIOLATION,
                'Trying to access credential store'