From 4aa97d1dbb93531c5a57037e474bbcadaf70105d Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Mon, 3 Aug 2026 10:40:02 -0700
Subject: [PATCH] Check ACLs when editing allowed hosts

---
 postgresql/edit_host.cgi | 1 +
 postgresql/save_host.cgi | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/postgresql/edit_host.cgi b/postgresql/edit_host.cgi
index e0158ae08..11f6cc8bf 100755
--- a/postgresql/edit_host.cgi
+++ b/postgresql/edit_host.cgi
@@ -4,6 +4,7 @@
 
 require './postgresql-lib.pl';
 &ReadParse();
+$access{'users'} || &error($text{'host_ecannot'});
 $v = &get_postgresql_version();
 if ($in{'new'}) {
 	$type = $in{'new'};
diff --git a/postgresql/save_host.cgi b/postgresql/save_host.cgi
index 16745dafe..377aad6a1 100755
--- a/postgresql/save_host.cgi
+++ b/postgresql/save_host.cgi
@@ -4,11 +4,12 @@
 
 require './postgresql-lib.pl';
 &ReadParse();
+&error_setup($text{'host_err'});
+$access{'users'} || &error($text{'host_ecannot'});
 &lock_file($hba_conf_file);
 $v = &get_postgresql_version();
 @all = &get_hba_config($v);
 $host = $all[$in{'idx'}] if (!$in{'new'});
-&error_setup($text{'host_err'});
 
 if ($in{'delete'}) {
 	# delete one host