mirror of
https://github.com/OrchardCMS/Orchard.git
synced 2026-02-09 09:16:41 +08:00
#18157: Adding a exception on RequestLostPassword action when appying AccessFrontEnd permission
Work Item: 18157 --HG-- branch : 1.x
This commit is contained in:
@@ -20,7 +20,8 @@ namespace Orchard.Users.Security {
|
||||
var isAuthPage = (filterContext.ActionDescriptor.ActionName == "LogOn"
|
||||
|| filterContext.ActionDescriptor.ActionName == "ChangePassword"
|
||||
|| filterContext.ActionDescriptor.ActionName == "AccessDenied"
|
||||
|| filterContext.ActionDescriptor.ActionName == "Register")
|
||||
|| filterContext.ActionDescriptor.ActionName == "Register"
|
||||
|| filterContext.ActionDescriptor.ActionName == "RequestLostPassword")
|
||||
&& filterContext.ActionDescriptor.ControllerDescriptor.ControllerName == "Account";
|
||||
|
||||
if (!AdminFilter.IsApplied(filterContext.RequestContext) && !isAuthPage && !_authorizer.Authorize(StandardPermissions.AccessFrontEnd, T("Can't access this website"))) {
|
||||
|
||||
Reference in New Issue
Block a user