Added canPreorder check in PreorderController::init()

This commit is contained in:
Frank Schubert
2026-02-04 15:37:09 +01:00
parent cf88bef333
commit 592d1b83b2

View File

@@ -11,7 +11,7 @@ class PreorderController extends mfBaseController {
$isApiWhitelist = (isset($_GET['do']) && $_GET['do'] === 'getFCPsForCampaign' && $this->action === 'Api');
if (!$me->is(["Admin", "netowner", "salespartner", "preorderfront"])) {
if (!$me->is(["Admin", "netowner", "salespartner", "preorderfront"]) && !$me->can("Preorder")) {
if (!$isApiWhitelist) {
$this->redirect("Dashboard");
}