AC-10332: Tfa reset access

mrprabhu92 · mrprabhu92 · commit dae5657cd11e · 2024-07-29T19:01:29.000+05:30
diff --git a/TwoFactorAuth/Controller/Adminhtml/Tfa/Reset.php b/TwoFactorAuth/Controller/Adminhtml/Tfa/Reset.php
@@ -89,6 +89,7 @@ public function execute()
      */
     protected function _isAllowed()
     {
-        return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa');
+        return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa')
+            && $this->_authorization->isAllowed('Magento_User::acl_users');
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -89,6 +89,7 @@ public function execute()`
`89`	`89`	`*/`
`90`	`90`	`protected function _isAllowed()`
`91`	`91`	`{`
`92`		`- return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa');`
	`92`	`+ return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa')`
	`93`	`+ && $this->_authorization->isAllowed('Magento_User::acl_users');`
`93`	`94`	`}`
`94`	`95`	`}`