Use 'set_configuration_threshold' for set config access check

Fixes #32258
mantisbt · Apr 9, 2023 · da8d235 · da8d235
1 parent 4d0036a
commit da8d235
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/core/commands/ConfigsSetCommand.php b/core/commands/ConfigsSetCommand.php
@@ -48,12 +48,14 @@ function __construct( array $p_data ) {
 
 	/**
 	 * Validate the data.
+	 * 
+	 * @return void
 	 */
 	function validate() {
 		$t_current_user_id = auth_get_current_user_id();
 
-		// verify that user has administrator access
-		$t_access_level_required = config_get_global( 'admin_site_threshold' );
+		// verify that user has appropriate access level to set configuration via database
+		$t_access_level_required = config_get_global( 'set_configuration_threshold' );
 		if( !access_has_global_level( $t_access_level_required, $t_current_user_id ) ) {
 			throw new ClientException(
 				"User doesn't have access to set configs.",