Skip to content

Commit 74a40ad

Browse files
authored
fix(dashboard): Fixes security vulnerability that allowed event_tracking role to access Dashboard (#215)
1 parent 821789f commit 74a40ad

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

app/controllers/manage/dashboard_controller.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
class Manage::DashboardController < Manage::ApplicationController
22
skip_before_action :require_admin_or_limited_admin
3-
before_action :require_admin_or_limited_admin_or_event_tracking
3+
before_action :require_admin_or_limited_admin
44

55
def index
66
end

0 commit comments

Comments
 (0)