check the module permission to add module

Fix dnnsoftware#4234
zyhfish · Oct 22, 2020 · 7ebe949 · 7ebe949
1 parent 49b7291
commit 7ebe949
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/DNN Platform/DotNetNuke.Web/InternalServices/ControlBarController.cs b/DNN Platform/DotNetNuke.Web/InternalServices/ControlBarController.cs
@@ -586,6 +586,10 @@ private int DoAddExistingModule(int moduleId, int tabId, string paneName, int po
                             break;
                     }
                 }
+                else if (!ModulePermissionController.HasModuleAccess(SecurityAccessLevel.Edit, "MANAGE", moduleInfo))
+                {
+                    throw new SecurityException($"Module '{moduleInfo.ModuleID}' is not available in current context.");
+                }
 
                 // clone the module object ( to avoid creating an object reference to the data cache )
                 ModuleInfo newModule = moduleInfo.Clone();