fix Bug 65569

ONLYOFFICE · Dec 19, 2023 · c739091 · c739091
1 parent b51b04b
commit c739091
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/products/ASC.Files/Server/Api/EditorController.cs b/products/ASC.Files/Server/Api/EditorController.cs
@@ -326,19 +326,22 @@ public class EditorController : ApiControllerBase
     private readonly MessageService _messageService;
     private readonly DocumentServiceConnector _documentServiceConnector;
     private readonly CommonLinkUtility _commonLinkUtility;
+    private readonly PermissionContext _permissionContext;
 
     public EditorController(
         FilesLinkUtility filesLinkUtility,
         MessageService messageService,
         DocumentServiceConnector documentServiceConnector,
         CommonLinkUtility commonLinkUtility,
         FolderDtoHelper folderDtoHelper,
-        FileDtoHelper fileDtoHelper) : base(folderDtoHelper, fileDtoHelper)
+        FileDtoHelper fileDtoHelper,
+        PermissionContext permissionContext) : base(folderDtoHelper, fileDtoHelper)
     {
         _filesLinkUtility = filesLinkUtility;
         _messageService = messageService;
         _documentServiceConnector = documentServiceConnector;
         _commonLinkUtility = commonLinkUtility;
+        _permissionContext = permissionContext;
     }
 
 
@@ -354,7 +357,9 @@ public EditorController(
     /// <collection>list</collection>
     [HttpPut("docservice")]
     public async Task<IEnumerable<string>> CheckDocServiceUrl(CheckDocServiceUrlRequestDto inDto)
-    {
+    {        
+        await _permissionContext.DemandPermissionsAsync(SecurityConstants.EditPortalSettings);
+
         _filesLinkUtility.DocServiceUrl = inDto.DocServiceUrl;
         _filesLinkUtility.DocServiceUrlInternal = inDto.DocServiceUrlInternal;
         _filesLinkUtility.DocServicePortalUrl = inDto.DocServiceUrlPortal;