DNN-10163 - AddLogSettings now returns 401 status if user has admin role

daguiler · Sep 7, 2017 · 4d1f352 · 4d1f352
1 parent 8c0d420
commit 4d1f352
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/Modules/Manage/Dnn.PersonaBar.AdminLogs/Services/AdminLogsController.cs b/src/Modules/Manage/Dnn.PersonaBar.AdminLogs/Services/AdminLogsController.cs
@@ -412,6 +412,11 @@ public HttpResponseMessage AddLogSetting([FromBody] UpdateLogSettingsRequest req
         {
             try
             {
+                var isAdmin = UserInfo.Roles.Contains(PortalSettings.AdministratorRoleName);
+                if (isAdmin)
+                {
+                    return Request.CreateResponse(HttpStatusCode.Unauthorized);
+                }
                 request.LogTypePortalID = UserInfo.IsSuperUser ? request.LogTypePortalID : PortalId.ToString();
 
                 var logTypeConfigInfo = JObject.FromObject(request).ToObject<LogTypeConfigInfo>();