Merge pull request #171 from magento-cia/cia-2.4.8-beta1-develop-bugf…

…ix-09032024 Cia 2.4.8 beta1 develop bugfix 09032024
magento · Sep 5, 2024 · 6b9e6ca · 6b9e6ca
2 parents d3a759b + 19bfa97
commit 6b9e6ca
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/TwoFactorAuth/Controller/Adminhtml/Tfa/Reset.php b/TwoFactorAuth/Controller/Adminhtml/Tfa/Reset.php
@@ -89,6 +89,7 @@ public function execute()
      */
     protected function _isAllowed()
     {
-        return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa');
+        return parent::_isAllowed() && $this->_authorization->isAllowed('Magento_TwoFactorAuth::tfa')
+            && $this->_authorization->isAllowed('Magento_User::acl_users');
     }
 }