Merge pull request #171 from magento-cia/cia-2.4.8-beta1-develop-bugfix-09032024

pawan-adobe-security · web-flow · commit 6b9e6ca38304 · 2024-09-05T13:27:31.000+05:30
Cia 2.4.8 beta1 develop bugfix 09032024
diff --git a/TwoFactorAuth/Controller/Adminhtml/Tfa/Reset.php b/TwoFactorAuth/Controller/Adminhtml/Tfa/Reset.php
@@ -89,6 +89,7 @@ public function execute()
      */
     protected function _isAllowed()
     {
-        return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa');
+        return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa')
+            && $this->_authorization->isAllowed('Magento_User::acl_users');
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -89,6 +89,7 @@ public function execute()`
`89`	`89`	`*/`
`90`	`90`	`protected function _isAllowed()`
`91`	`91`	`{`
`92`		`- return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa');`
	`92`	`+ return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa')`
	`93`	`+ && $this->_authorization->isAllowed('Magento_User::acl_users');`
`93`	`94`	`}`
`94`	`95`	`}`