stop non admins from using admin (temp fix)

infinitas · Jun 11, 2010 · c3928be · c3928be
1 parent 7612f87
commit c3928be
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app_controller.php b/app_controller.php
@@ -101,6 +101,10 @@ function beforeFilter() {
 				}
 			}
 
+			if((isset($this->params['admin']) && $this->params['admin']) && $this->params['action'] != 'admin_login' && $this->Session->read('Auth.User.group_id') != 1){
+				$this->redirect(array('admin' => 1, 'plugin' => 'management', 'controller' => 'users', 'action' => 'login'));
+			}
+
 			if (isset($this->data['PaginationOptions']['pagination_limit'])) {
 				$this->Infinitas->changePaginationLimit( $this->data['PaginationOptions'], $this->params );
 			}