put the C in ACL here, too

diff --git a/httemplate/config/config-download.cgi b/httemplate/config/config-download.cgi
index d4b88de..95a172a 100644 (file)
--- a/httemplate/config/config-download.cgi
+++ b/httemplate/config/config-download.cgi
@@ -12,3 +12,7 @@
 %
 %http_header('Content-Disposition' => "attachment; filename=$name" );
 % print $conf->config_binary($name);
+<%init>
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Configuration');
+</%init>