Fixed access permission to provider config

edgardmessias · edgardmessias · commit 1937c6cabb74 · 2021-01-20T14:58:06.000-03:00
diff --git a/front/provider.form.php b/front/provider.form.php
@@ -4,6 +4,8 @@
 
 include ('../../../inc/includes.php');
 
+Session::checkRight("config", UPDATE);
+
 if (!isset($_GET["id"])) {
    $_GET["id"] = "";
 }
diff --git a/front/provider.php b/front/provider.php
@@ -2,6 +2,8 @@
 
 include ('../../../inc/includes.php');
 
+Session::checkRight("config", UPDATE);
+
 if ($_SESSION["glpiactiveprofile"]["interface"] == "central") {
    Html::header(__sso('Single Sign-on'), $_SERVER['PHP_SELF'], "config", "pluginsinglesignonprovider", "");
 } else {

Original file line number	Diff line number	Diff line change
`@@ -4,6 +4,8 @@`
`4`	`4`
`5`	`5`	`include ('../../../inc/includes.php');`
`6`	`6`
	`7`	`+Session::checkRight("config", UPDATE);`
	`8`	`+`
`7`	`9`	`if (!isset($_GET["id"])) {`
`8`	`10`	`$_GET["id"] = "";`
`9`	`11`	`}`