#8057 Missing permission check for Omnisend plugin configuration page

Co-authored-by: Atiqur Rahman Foyshal <atiqur@fished.com>

Author: atiq-bs23

src/Plugins/Nop.Plugin.Misc.Omnisend/Controllers/OmnisendAdminController.cs

@@ -5,6 +5,7 @@
 using Nop.Services.Configuration;
 using Nop.Services.Localization;
 using Nop.Services.Messages;
+using Nop.Services.Security;
 using Nop.Web.Framework;
 using Nop.Web.Framework.Controllers;
 using Nop.Web.Framework.Mvc.Filters;
@@ -70,6 +71,7 @@ bool needBlock(BatchResponse response, string endpoint)
 
     #region Methods
 
+    [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]
     public async Task<IActionResult> Configure()
     {
         var model = new ConfigurationModel
@@ -85,6 +87,7 @@ public async Task<IActionResult> Configure()
 
     [HttpPost, ActionName("Configure")]
     [FormValueRequired("save")]
+    [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]
     public async Task<IActionResult> Configure(ConfigurationModel model)
     {
         if (!ModelState.IsValid)
@@ -119,6 +122,7 @@ public async Task<IActionResult> Configure(ConfigurationModel model)
 
     [HttpPost, ActionName("Configure")]
     [FormValueRequired("sync-contacts")]
+    [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]
     public async Task<IActionResult> SyncContacts()
     {
         if (!ModelState.IsValid || string.IsNullOrEmpty(_omnisendSettings.BrandId))
@@ -131,6 +135,7 @@ public async Task<IActionResult> SyncContacts()
 
     [HttpPost, ActionName("Configure")]
     [FormValueRequired("sync-products")]
+    [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]
     public async Task<IActionResult> SyncProducts()
     {
         if (!ModelState.IsValid || string.IsNullOrEmpty(_omnisendSettings.BrandId))
@@ -144,6 +149,7 @@ public async Task<IActionResult> SyncProducts()
 
     [HttpPost, ActionName("Configure")]
     [FormValueRequired("sync-orders")]
+    [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]
     public async Task<IActionResult> SyncOrders()
     {
         if (!ModelState.IsValid || string.IsNullOrEmpty(_omnisendSettings.BrandId))

src/Plugins/Nop.Plugin.Misc.Omnisend/plugin.json

@@ -2,7 +2,7 @@
   "Group": "Misc",
   "FriendlyName": "Omnisend",
   "SystemName": "Misc.Omnisend",
-  "Version": "5.00.1",
+  "Version": "5.00.2",
   "SupportedVersions": [ "5.00" ],
   "Author": "nopCommerce team",
   "DisplayOrder": 1,