CRM-19223 - migrate/(export|import)JSON.php - Require "administer CiviCRM"

diff --git a/bin/migrate/exportJSON.php b/bin/migrate/exportJSON.php
index 3012412b039a52b45db0d6ba4787af379ac78ee3..1040afc18021929562a5885c1a5794946d2464ce 100644 (file)
--- a/bin/migrate/exportJSON.php
+++ b/bin/migrate/exportJSON.php
@@ -38,7 +38,11 @@ function run() {
   $config = CRM_Core_Config::singleton();
 
   // this does not return on failure
-  // CRM_Utils_System::authenticateScript( true );
+  CRM_Utils_System::authenticateScript( true );
+  if (!CRM_Core_Permission::check('administer CiviCRM')) {
+    CRM_Utils_System::authenticateAbort("User does not have required permission (administer CiviCRM).\n", TRUE);
+  }
+
   $params = array();
 
   require_once 'CRM/Utils/Migrate/ExportJSON.php';

diff --git a/bin/migrate/importJSON.php b/bin/migrate/importJSON.php
index 18a5c02404c0f0850246a3a42451ff99cccdadbc..21a23b2556cb235e9234ebddda0a71475615b420 100644 (file)
--- a/bin/migrate/importJSON.php
+++ b/bin/migrate/importJSON.php
@@ -38,7 +38,10 @@ function run() {
   $config = CRM_Core_Config::singleton();
 
   // this does not return on failure
-  // CRM_Utils_System::authenticateScript( true );
+  CRM_Utils_System::authenticateScript( true );
+  if (!CRM_Core_Permission::check('administer CiviCRM')) {
+    CRM_Utils_System::authenticateAbort("User does not have required permission (administer CiviCRM).\n", TRUE);
+  }
 
   require_once 'CRM/Utils/Migrate/ImportJSON.php';
   $import = new CRM_Utils_Migrate_ImportJSON();