first commit

admininistrator/controller/startup/permission.php

@@ -0,0 +1,41 @@
+<?php
+namespace Opencart\Admin\Controller\Startup;
+/**
+ * Class Permission
+ *
+ * @package Opencart\Admin\Controller\Startup
+ */
+class Permission extends \Opencart\System\Engine\Controller {
+	/**
+	 * @return object|\Opencart\System\Engine\Action|null
+	 */
+	public function index(): object|null {
+		if (isset($this->request->get['route'])) {
+			$pos = strrpos($this->request->get['route'], '.');
+
+			if ($pos === false) {
+				$route = $this->request->get['route'];
+			} else {
+				$route = substr($this->request->get['route'], 0, $pos);
+			}
+
+			// We want to ignore some pages from having its permission checked.
+			$ignore = [
+				'common/dashboard',
+				'common/login',
+				'common/logout',
+				'common/forgotten',
+				'common/authorize',
+				'common/language',
+				'error/not_found',
+				'error/permission'
+			];
+
+			if (!in_array($route, $ignore) && !$this->user->hasPermission('access', $route)) {
+				return new \Opencart\System\Engine\Action('error/permission');
+			}
+		}
+
+		return null;
+	}
+}