#8059 Missing permission check for Request for quote plugin configuration page

atiq-bs23 · atiqur-foyshal-cefalo · web-flow · commit feab2a5b6f73 · 2026-01-20T17:03:08.000+03:00
Co-authored-by: Atiqur Rahman Foyshal &lt;atiqur@fished.com&gt;
diff --git a/src/Plugins/Nop.Plugin.Misc.RFQ/Controllers/RfqAdminController.cs b/src/Plugins/Nop.Plugin.Misc.RFQ/Controllers/RfqAdminController.cs
@@ -86,6 +86,7 @@ public RfqAdminController(AdminModelFactory modelFactory,
 
     #region Configure
 
+    [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]
     public IActionResult Configure()
     {
         var model = new ConfigurationModel
@@ -100,6 +101,7 @@ public IActionResult Configure()
 
     [HttpPost, ActionName("Configure")]
     [FormValueRequired("save")]
+    [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]
     public async Task<IActionResult> Configure(ConfigurationModel model)
     {
         if (!ModelState.IsValid)

Original file line number	Diff line number	Diff line change
`@@ -86,6 +86,7 @@ public RfqAdminController(AdminModelFactory modelFactory,`
`86`	`86`
`87`	`87`	`#region Configure`
`88`	`88`
	`89`	`+ [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]`
`89`	`90`	`public IActionResult Configure()`
`90`	`91`	`{`
`91`	`92`	`var model = new ConfigurationModel`
`@@ -100,6 +101,7 @@ public IActionResult Configure()`
`100`	`101`
`101`	`102`	`[HttpPost, ActionName("Configure")]`
`102`	`103`	`[FormValueRequired("save")]`
	`104`	`+ [CheckPermission(StandardPermission.Configuration.MANAGE_PLUGINS)]`
`103`	`105`	`public async Task<IActionResult> Configure(ConfigurationModel model)`
`104`	`106`	`{`
`105`	`107`	`if (!ModelState.IsValid)`