Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/zabbix/zabbix.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMārtiņš Tālbergs <martins.talbergs@zabbix.com>2021-01-13 12:42:34 +0300
committerMārtiņš Tālbergs <martins.talbergs@zabbix.com>2021-01-13 12:42:34 +0300
commita550ce9c9cd42842742bf302eeca54e7fc192647 (patch)
tree68c57656f79af2b1f6c8d5fe62a480dade1a02a7 /ui/app/controllers/CControllerUserTokenList.php
parent5abd5f5904ca05b1faf65063ac699f0b0e157f60 (diff)
..F....... [ZBXNEXT-6207] fixed guest user access to tokens
Diffstat (limited to 'ui/app/controllers/CControllerUserTokenList.php')
-rw-r--r--ui/app/controllers/CControllerUserTokenList.php4
1 files changed, 4 insertions, 0 deletions
diff --git a/ui/app/controllers/CControllerUserTokenList.php b/ui/app/controllers/CControllerUserTokenList.php
index 984fc327a1c..6f7e7b1be94 100644
--- a/ui/app/controllers/CControllerUserTokenList.php
+++ b/ui/app/controllers/CControllerUserTokenList.php
@@ -49,6 +49,10 @@ class CControllerUserTokenList extends CController {
}
protected function checkPermissions() {
+ if (CWebUser::isGuest()) {
+ return false;
+ }
+
return $this->checkAccess(CRoleHelper::ACTIONS_MANAGE_API_TOKENS);
}