diff --git a/controllers/grid/settings/plugins/SettingsPluginGridHandler.php b/controllers/grid/settings/plugins/SettingsPluginGridHandler.php index 2fd082b5a65..d2e8b877ecb 100644 --- a/controllers/grid/settings/plugins/SettingsPluginGridHandler.php +++ b/controllers/grid/settings/plugins/SettingsPluginGridHandler.php @@ -21,6 +21,7 @@ use PKP\controllers\grid\plugins\PluginGridHandler; use PKP\controllers\grid\plugins\PluginGridRow; use PKP\db\DAORegistry; +use PKP\security\authorization\CanAccessSettingsPolicy; use PKP\security\authorization\ContextAccessPolicy; use PKP\security\authorization\PluginAccessPolicy; use PKP\security\Role; @@ -110,6 +111,7 @@ public function authorize($request, &$args, $roleAssignments) } else { $this->addPolicy(new ContextAccessPolicy($request, $roleAssignments)); } + $this->addPolicy(new CanAccessSettingsPolicy()); return parent::authorize($request, $args, $roleAssignments); } } diff --git a/dbscripts/xml/upgrade.xml b/dbscripts/xml/upgrade.xml index 1a5e2bc1d10..6bf8b307cf6 100644 --- a/dbscripts/xml/upgrade.xml +++ b/dbscripts/xml/upgrade.xml @@ -128,6 +128,7 @@ + diff --git a/registry/userGroups.xml b/registry/userGroups.xml index d66706ef20b..3140cfb9ce7 100644 --- a/registry/userGroups.xml +++ b/registry/userGroups.xml @@ -14,9 +14,9 @@ - - - + + +