search

nexcess / magento-sentry-two-factor-authentication

28 stars 18 forks source link

Fix login issue for users with limited permissions #17

Closed cwmiller closed 7 years ago

cwmiller commented 7 years ago

Fixes issue #6

Magento expects admin controllers to override the _isAllowed method and check if the admin user is allowed access. If omitted, the default behavior of recent Magento versions can return false if the user has a limited set of permissions, notably the dashboard permission. Since we must allow all admin users access to the 2fa forms to complete login, simply returning true resolves this.

miguelbalparda commented 7 years ago

Thank you for your contribution @cwmiller!