PSMEL-212 - Unauthorized

If user can MANAGE_POSTMAN_CAPABILITY_NAME, user can ajax request as well

Author: smusmanobjects

Postman/Postman-Connectivity-Test/PostmanConnectivityTestController.php

@@ -278,7 +278,7 @@ function runSmtpTest() {
 
 	    check_admin_referer('post-smtp', 'security');
 
-		if( !current_user_can( 'edit_plugins' ) ) {
+		if( !current_user_can( Postman::MANAGE_POSTMAN_CAPABILITY_NAME ) ) {
 			wp_send_json_error( 
 				array(
 					'Message'	=>	'Unauthorized.'
@@ -317,7 +317,7 @@ function runSmtpsTest() {
 
 	    check_admin_referer('post-smtp', 'security');
 
-		if( !current_user_can( 'edit_plugins' ) ) {
+		if( !current_user_can( Postman::MANAGE_POSTMAN_CAPABILITY_NAME ) ) {
 			wp_send_json_error( 
 				array(
 					'Message'	=>	'Unauthorized.'