require admin for any settings action

craftcms · Dec 9, 2024 · ddb9d31 · ddb9d31
1 parent 3a9b3fb
commit ddb9d31
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/src/controllers/SettingsController.php b/src/controllers/SettingsController.php
@@ -23,6 +23,17 @@
  */
 class SettingsController extends Controller
 {
+
+    /**
+     * @inheritdoc
+     */
+    public function beforeAction($action): bool
+    {
+        $this->requireAdmin();
+
+        return parent::beforeAction($action);
+    }
+
     /**
      * Display a form to allow an administrator to update plugin's API settings.
      *