From f110e50d3b70f4334e265cf0bab65a25e6331654 Mon Sep 17 00:00:00 2001
From: yalh76 <yalh@yahoo.com>
Date: Tue, 24 Mar 2020 18:46:45 +0100
Subject: [PATCH] provide page only if logged and has access

---
 access.lua | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/access.lua b/access.lua
index e2356e2..ea75853 100644
--- a/access.lua
+++ b/access.lua
@@ -275,7 +275,7 @@ end
 if longest_noauth_match ~= ""
 and string.len(longest_noauth_match) >= string.len(longest_protected_match) 
 and string.len(longest_noauth_match) > string.len(longest_unprotected_match) then
-    if hlp.is_logged_in() then
+    if hlp.is_logged_in() and hlp.has_access() then
       logger.debug("Noauth "..ngx.var.uri)
       return hlp.pass()
     end