Merge pull request #9361 from umbraco/v8/bug/logviewer-access

Limit access to logviewer endpoints to people with access to the settings section
umbraco · Nov 9, 2020 · 7701a0f · 7701a0f
2 parents 620c11c + bd4c2cd
commit 7701a0f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Umbraco.Web/Editors/LogViewerController.cs b/src/Umbraco.Web/Editors/LogViewerController.cs
@@ -6,13 +6,15 @@
 using Umbraco.Core.Persistence.DatabaseModelDefinitions;
 using Umbraco.Web.Mvc;
 using Umbraco.Web.WebApi;
+using Umbraco.Web.WebApi.Filters;
 
 namespace Umbraco.Web.Editors
 {
     /// <summary>
     /// Backoffice controller supporting the dashboard for viewing logs with some simple graphs & filtering
     /// </summary>
     [PluginController("UmbracoApi")]
+    [UmbracoApplicationAuthorize(Core.Constants.Applications.Settings)]
     public class LogViewerController : UmbracoAuthorizedJsonController
     {
         private readonly ILogViewer _logViewer;