provide page only if logged and has access

This commit is contained in:
yalh76 2020-03-24 18:46:45 +01:00
parent b6c02c5aca
commit f110e50d3b

View file

@ -275,7 +275,7 @@ end
if longest_noauth_match ~= ""
and string.len(longest_noauth_match) >= string.len(longest_protected_match)
and string.len(longest_noauth_match) > string.len(longest_unprotected_match) then
if hlp.is_logged_in() then
if hlp.is_logged_in() and hlp.has_access() then
logger.debug("Noauth "..ngx.var.uri)
return hlp.pass()
end