From 089f270957fd5a373a9f925feda30e4cf2384dcd Mon Sep 17 00:00:00 2001 From: markjcrane Date: Fri, 24 Jul 2015 08:59:13 -0600 Subject: [PATCH] Only include if the domain_setting_edit permission has been assigned to the current user. --- core/domain_settings/domain_edit.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/domain_settings/domain_edit.php b/core/domain_settings/domain_edit.php index f47a06c9a5..ae274754b0 100644 --- a/core/domain_settings/domain_edit.php +++ b/core/domain_settings/domain_edit.php @@ -706,7 +706,7 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) { echo ""; - if ($action == "update") { + if (permission_exists('domain_setting_edit') && $action == "update") { require "domain_settings.php"; }