Skip to content

Security : Admin can only access the Bulk Tool#6

Open
sushan05 wants to merge 1 commit into
techjoomla:masterfrom
sushan05:structuredPackage
Open

Security : Admin can only access the Bulk Tool#6
sushan05 wants to merge 1 commit into
techjoomla:masterfrom
sushan05:structuredPackage

Conversation

@sushan05
Copy link
Copy Markdown
Contributor

No description provided.


$user = JFactory::getUser();
$user = JFactory::getUser();
$userAuthorised = $user->authorise('core.admin', '');
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are these permissions specific to import tool or are you using Joomla's permissions ? Need to be imported specific ACL.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These are not specific to Importer Tool. We haven't yet implemented ACL in our Tool. For now, I have used Joomla's permission.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok. For now, remove this since it will be a problem when integrating with other extensions. It wont always be a super user using it.

I've added an issue for ACL management, lets discuss and implement that later.

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Oct 4, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants