summaryrefslogtreecommitdiffstats
path: root/src/etc/inc/config.lib.inc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2017-06-07 11:38:10 -0400
committerjim-p <jimp@pfsense.org>2017-06-07 11:38:10 -0400
commit88fbd229e0d8fd9d2e2ba57c0c254bef23774393 (patch)
tree67bc202d7d67186b54a1e9a07f999e20c98146e1 /src/etc/inc/config.lib.inc
parent5e17c8e31f3ca28eac4864b1c70b602208dc3f13 (diff)
parent6356e3e8c77c7e18165f7c3a6c2fb871d44adc06 (diff)
downloadpfsense-88fbd229e0d8fd9d2e2ba57c0c254bef23774393.zip
pfsense-88fbd229e0d8fd9d2e2ba57c0c254bef23774393.tar.gz
Merge pull request #3750 from PiBa-NL/20170606-denyconfigwrite
Diffstat (limited to 'src/etc/inc/config.lib.inc')
-rw-r--r--src/etc/inc/config.lib.inc1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/etc/inc/config.lib.inc b/src/etc/inc/config.lib.inc
index c700052..0ee64b9 100644
--- a/src/etc/inc/config.lib.inc
+++ b/src/etc/inc/config.lib.inc
@@ -447,6 +447,7 @@ function write_config($desc="Unknown", $backup = true, $write_config_only = fals
if (!empty($_SESSION['Username']) && ($_SESSION['Username'] != "admin")) {
$user = getUserEntry($_SESSION['Username']);
if (is_array($user) && userHasPrivilege($user, "user-config-readonly")) {
+ syslog(LOG_AUTHPRIV, sprintf(gettext("Save config permission denied by the 'User - Config: Deny Config Write' permission for user '%s'."), $_SESSION['Username']));
phpsession_end(true);
return false;
}
OpenPOWER on IntegriCloud