From 27216c115fc2a2f8b76abc91be9bba599c6516fc Mon Sep 17 00:00:00 2001 From: jeff Date: Tue, 27 Feb 2007 22:10:25 +0000 Subject: put the C in ACL here, too --- httemplate/config/config-download.cgi | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'httemplate') diff --git a/httemplate/config/config-download.cgi b/httemplate/config/config-download.cgi index d4b88ded9..95a172a51 100644 --- a/httemplate/config/config-download.cgi +++ b/httemplate/config/config-download.cgi @@ -12,3 +12,7 @@ % %http_header('Content-Disposition' => "attachment; filename=$name" ); % print $conf->config_binary($name); +<%init> +die "access denied" + unless $FS::CurrentUser::CurrentUser->access_right('Configuration'); + -- cgit v1.2.1