Don't allow login subscriber to subscriber details

12 years ago · 93fb5eb1cb
parent d5dc850bd9
commit 93fb5eb1cb
1 changed files with 1 additions and 1 deletions
--- a/lib/NGCP/Panel/Controller/Subscriber.pm
+++ b/lib/NGCP/Panel/Controller/Subscriber.pm
@ -1539,7 +1539,7 @@ sub master :Chained('base') :PathPart('details') :CaptureArgs(0) {
    );
 }

-sub details :Chained('master') :PathPart('') :Args(0) {
+sub details :Chained('master') :PathPart('') :Args(0) :Does(ACL) :ACLDetachTo('/denied_page') :AllowedRole(admin) :AllowedRole(reseller) :AllowedRole('subscriberadmin') {
    my ($self, $c) = @_;

    $c->stash->{prov_lock} = NGCP::Panel::Utils::Preferences::get_usr_preference_rs(