BUG-14986 Authorization Bypass via Forceful Browsing IMPROVEMENT

2014-07-03 16:37:24 -04:00
parent 2cdd7c1a02
commit b4ff11ddec
1 changed files with 2 additions and 0 deletions
--- a/workflow/engine/methods/users/usersNew.php
+++ b/workflow/engine/methods/users/usersNew.php
@@ -1,4 +1,6 @@
 <?php
+global $RBAC;
+$RBAC->requirePermissions( 'PM_USERS' );

 //calculating the max upload file size;
 $POST_MAX_SIZE = ini_get( 'post_max_size' );