diff --git a/app/pages/config.php b/app/pages/config.php index 48c80be..e944722 100644 --- a/app/pages/config.php +++ b/app/pages/config.php @@ -114,7 +114,8 @@ if (!$isAjax) { * Handles GET requests to display templates. */ - if ($userObject->hasRight($userId, 'view config file')) { + if ($userObject->hasRight($userId, 'superuser') || + $userObject->hasRight($userId, 'view config file')) { include '../app/templates/config.php'; } else { $logObject->insertLog($userId, "Unauthorized: User \"$currentUser\" tried to access \"config\" page. IP: $user_IP", 'system'); diff --git a/app/templates/config.php b/app/templates/config.php index eda1801..cb6180a 100644 --- a/app/templates/config.php +++ b/app/templates/config.php @@ -17,7 +17,8 @@ = htmlspecialchars($config['site_name']) ?> app configuration -hasRight($userId, 'edit config file')) { ?> +hasRight($userId, 'superuser') || + $userObject->hasRight($userId, 'edit config file')) { ?>