Skip to content
Permalink
Browse files

Don't expose manage urls to people without manage access.

  • Loading branch information...
flashwave committed Jul 5, 2019
1 parent 3b090c6 commit e52b7ebd0a9fcc9d0f5e934767427887169af30d
Showing with 5 additions and 0 deletions.
  1. +5 −0 src/url.php
@@ -196,9 +196,14 @@ function url_variable(string $value, array $variables): string {
}
function url_list(): array {
global $hasManageAccess;
$collection = [];
foreach(MSZ_URLS as $name => $urlInfo) {
if(empty($hasManageAccess) && starts_with($name, 'manage-'))
continue;
$item = [
'name' => $name,
'path' => $urlInfo[0],

0 comments on commit e52b7eb

Please sign in to comment.
You can’t perform that action at this time.