fix: fixed broken priv handling in plus 24.11

jaredhendrickson13 · Dec 8, 2024 · b0507f0 · b0507f0
1 parent 7c59347
commit b0507f0
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/pfSense-pkg-API/files/etc/inc/api/framework/APIAuth.inc b/pfSense-pkg-API/files/etc/inc/api/framework/APIAuth.inc
@@ -129,7 +129,10 @@ class APIAuth {
     public function authorize() {
         # Local variables
         $authorized = false;
-        $client_config =& getUserEntry($this->username);;
+
+        # Starting with pfSense Plus 24.11, the client config is nested under an 'item' key. Handle both cases.
+        $client_config =& getUserEntry($this->username);
+        $client_config = (array_key_exists('item', $client_config)) ? $client_config['item'] : $client_config;
         $this->privs = get_user_privileges($client_config);
 
         # If no require privileges were given, assume call is always authorized