From 720f68b9d00a7b017a0be4633a085dfb32f9fbf5 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Thu, 14 Feb 2008 18:34:21 +0000
Subject: - Patch #221072 by Pancho: fixed access control check on the theme
 configuration page.

---
 modules/system/system.module | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'modules')

diff --git a/modules/system/system.module b/modules/system/system.module
index bfba1446f..b4354e9a5 100644
--- a/modules/system/system.module
+++ b/modules/system/system.module
@@ -514,7 +514,7 @@ function system_menu() {
  * Menu item access callback - only admin or enabled themes can be accessed.
  */
 function _system_themes_access($theme) {
-  return $theme->status || $theme->name == variable_get('admin_theme', '0');
+  return user_access('administer site configuration') && ($theme->status || $theme->name == variable_get('admin_theme', '0'));
 }
 
 /**
-- 
cgit v1.2.3