Improve unauthorized redirection trigger case

romaldyminaya · Jul 21, 2017 · 205f02b · 205f02b
1 parent 151ed05
commit 205f02b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/cms/controllers/Themes.php b/modules/cms/controllers/Themes.php
@@ -46,7 +46,7 @@ public function __construct()
          * Custom redirect for unauthorized request
          */
         $this->bindEvent('page.beforeDisplay', function() {
-            if (!$this->user->hasAnyAccess($this->requiredPermissions)) {
+            if (!$this->user->hasAnyAccess($this->requiredPermissions) && $this->user->hasAccess('cms.manage_theme_options')) {
                 return Backend::redirect('cms/themeoptions/update');
             }
         });