diff --git a/airtime_mvc/application/controllers/plugins/Acl_plugin.php b/airtime_mvc/application/controllers/plugins/Acl_plugin.php index b28de407a..4cadba9db 100644 --- a/airtime_mvc/application/controllers/plugins/Acl_plugin.php +++ b/airtime_mvc/application/controllers/plugins/Acl_plugin.php @@ -152,7 +152,10 @@ class Zend_Controller_Plugin_Acl extends Zend_Controller_Plugin_Abstract $resourceName .= $controller; /** Check if the controller/action can be accessed by the current user */ - if (!$this->getAcl()->isAllowed($this->_roleName, $resourceName, $request->getActionName())) { + if (!$this->getAcl()->has($resourceName) + || !$this->getAcl()->isAllowed($this->_roleName, + $resourceName, + $request->getActionName())) { /** Redirect to access denied page */ $this->denyAccess(); }