Skip to content
Permalink
Browse files Browse the repository at this point in the history
fix: [security] Prevent unauthorized access to decaying import function
- as reported by Cyber Controls from SIX Group
  • Loading branch information
mokaddem committed Jan 18, 2023
1 parent a46f794 commit 93bf15d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion app/Controller/Component/ACLComponent.php
Expand Up @@ -125,7 +125,7 @@ class ACLComponent extends Component
'decayingModel' => array(
"update" => array(),
"export" => array('*'),
"import" => array('*'),
"import" => array('OR' => array('perm_admin', 'perm_decaying')),
"view" => array('*'),
"index" => array('*'),
"add" => array( 'OR' => array('perm_admin', 'perm_decaying')),
Expand Down

0 comments on commit 93bf15d

Please sign in to comment.