PATCH: only allow limits to be set when logged in as ADMIN

sunnysideup · Apr 19, 2017 · 69736ec · 69736ec
1 parent c44f276
commit 69736ec
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/code/tasks/EcommerceTaskCartCleanup.php b/code/tasks/EcommerceTaskCartCleanup.php
@@ -68,7 +68,7 @@ public function run($request)
         //LIMITS ...
         if ($request) {
             $limitFromGetVar = $request->getVar('limit');
-            if ($limitFromGetVar) {
+            if ($limitFromGetVar && Permission::check('ADMIN')) {
                 $maximumNumberOfObjectsDeleted = intval($limitFromGetVar);
             }
         }