Fix: improper access

pimcore · Jan 8, 2024 · f434210 · f434210
1 parent 0aa1a40
commit f434210
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/Controller/Admin/DuplicatesController.php b/src/Controller/Admin/DuplicatesController.php
@@ -20,6 +20,7 @@
 use CustomerManagementFrameworkBundle\DuplicatesIndex\DuplicatesIndexInterface;
 use Symfony\Component\HttpFoundation\JsonResponse;
 use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpKernel\Event\ControllerEvent;
 use Symfony\Component\Routing\Annotation\Route;
 
 /**
@@ -32,6 +33,12 @@ public function init()
         \Pimcore\Model\DataObject\AbstractObject::setHideUnpublished(true);
     }
 
+    public function onKernelControllerEvent(ControllerEvent $event): void
+    {
+        parent::onKernelControllerEvent($event);
+        $this->checkPermission('plugin_cmf_perm_customerview');
+    }
+
     /**
      * @param Request $request
      * @param DuplicatesIndexInterface $duplicatesIndex