search

nexcess / magento-sentry-two-factor-authentication

28 stars 18 forks source link

sentry-two-factor-authentication is not working with custom permission users #26

Open testuserexc opened 6 years ago

testuserexc commented 6 years ago

Hi,

In our maegnto website, the 2FA is not working with customers who have custom permission. When a customer permission user try to login, it doesnt shows any authentication steps like Duo and can login without going through any security checking. And the resultant page will shows access denied. Kindly advice how can we fix this issue.

Thanks, AnjalyExc

davidrushton commented 6 years ago

@testuserexc I just came across this issue as well. The admin controller is missing

    protected function _isAllowed()
    {
        return true;
    }

I was going to submit a PR to fix this, but it looks like this was already done in #17. The master branch just hasn't been merged with devel for a long time.

Hope that helps.