From 5ed9d4ca147527661165a9daa3a7fab4df6f0072 Mon Sep 17 00:00:00 2001
From: Nicolas Boisselier <nicolas.boisselier@gmail.com>
Date: Thu, 11 Jan 2018 02:36:30 +0000
Subject: [PATCH] www/dbq/dbq.php

---
 www/dbq/dbq.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/www/dbq/dbq.php b/www/dbq/dbq.php
index 87fc363a..9925966b 100644
--- a/www/dbq/dbq.php
+++ b/www/dbq/dbq.php
@@ -1171,14 +1171,17 @@ EOF;
 			$this->page($this->db,'status');
 
 		} elseif ($action == 'databases') {
+ 			$this->deniedUnless($this->perm >= self::ADMIN);
 			$this->page($this->db,'databases');
 
 		} elseif ($action == 'csv') {
+ 			$this->deniedUnless($this->perm >= self::ADMIN);
 			header('Content-type: text/plain');
 			$this->db->dump2csv();
 			exit;
 
 		} elseif ($action == 'dump') {
+ 			$this->deniedUnless($this->perm >= self::ADMIN);
 			header('Content-type: text/plain');
 			$this->db->dump($this->params['action']);
 			exit;
-- 
2.47.3