Skip to content

Commit e2ab34a

Browse files
authored
Fix: improper access customers duplicates list (#524)
1 parent 0aa1a40 commit e2ab34a

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

src/Controller/Admin/DuplicatesController.php

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,7 @@
2020
use CustomerManagementFrameworkBundle\DuplicatesIndex\DuplicatesIndexInterface;
2121
use Symfony\Component\HttpFoundation\JsonResponse;
2222
use Symfony\Component\HttpFoundation\Request;
23+
use Symfony\Component\HttpKernel\Event\ControllerEvent;
2324
use Symfony\Component\Routing\Annotation\Route;
2425

2526
/**
@@ -32,6 +33,12 @@ public function init()
3233
\Pimcore\Model\DataObject\AbstractObject::setHideUnpublished(true);
3334
}
3435

36+
public function onKernelControllerEvent(ControllerEvent $event): void
37+
{
38+
parent::onKernelControllerEvent($event);
39+
$this->checkPermission('plugin_cmf_perm_customerview');
40+
}
41+
3542
/**
3643
* @param Request $request
3744
* @param DuplicatesIndexInterface $duplicatesIndex

0 commit comments

Comments
 (0)