fix: update permissions for institutional managers

pressbooks · Dec 18, 2024 · 05bf432 · 05bf432
1 parent 021e8ee
commit 05bf432
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/src/Services/PermissionsManager.php b/src/Services/PermissionsManager.php
@@ -197,6 +197,11 @@ private function currentUserHasAccess(string $currentPageParam, array $allowedBo
             }
         }
 
+        // Prevent institutional managers from editing pages on the root site
+        if ($currentBlogId === 1 && ($pagenow === 'edit.php' || $pagenow === 'post.php')) {
+            $isAccessAllowed = false;
+        }
+
         return $isAccessAllowed;
     }
 }
diff --git a/src/Support/helpers.php b/src/Support/helpers.php
@@ -69,7 +69,8 @@ function get_allowed_pages(): array
         'users.php',
         'export-personal-data.php',
         'erase-personal-data.php',
-        'options-privacy.php'
+        'options-privacy.php',
+        'site-new.php'
     ];
 }