From 9367b258697a5934defc6832bc8c71c043aa118d Mon Sep 17 00:00:00 2001
From: Jean-Christian Denis <contact@jcdenis.fr>
Date: Tue, 2 Nov 2021 23:59:13 +0100
Subject: [PATCH] only admin can manage config

---
 _config.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/_config.php b/_config.php
index f2e277b..1cd274c 100644
--- a/_config.php
+++ b/_config.php
@@ -14,6 +14,9 @@ if (!defined('DC_CONTEXT_MODULE')) {
     return null;
 }
 
+# Check user perms
+dcPage::check('admin');
+
 $redir = empty($_REQUEST['redir']) ?
     $list->getURL() . '#plugins' : $_REQUEST['redir'];