Skip to content

Commit b37d454

Browse files
committed
MAGETWO-71119: Failure to check admin permissions leads to information disclosure
1 parent a47adae commit b37d454

File tree

2 files changed

+0
-2
lines changed

2 files changed

+0
-2
lines changed

app/code/Magento/Ui/Controller/Adminhtml/Export/GridToCsv.php

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,6 @@ protected function _isAllowed()
8484
->getDataProvider()
8585
->getConfigData();
8686
if (isset($dataProviderConfig['aclResource'])) {
87-
8887
return $this->_authorization->isAllowed(
8988
$dataProviderConfig['aclResource']
9089
);

app/code/Magento/Ui/Controller/Adminhtml/Export/GridToXml.php

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,6 @@ protected function _isAllowed()
8484
->getDataProvider()
8585
->getConfigData();
8686
if (isset($dataProviderConfig['aclResource'])) {
87-
8887
return $this->_authorization->isAllowed(
8988
$dataProviderConfig['aclResource']
9089
);

0 commit comments

Comments
 (0)