From 6c008506d91085473fa7addde4bcb3064f5c3bb4 Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Sat, 10 Oct 2026 15:57:08 -0700
Subject: [PATCH] Add missing ACL check

---
 acl/save_acl.cgi | 1 +
 1 file changed, 1 insertion(+)

diff --git a/acl/save_acl.cgi b/acl/save_acl.cgi
index 6fcf8c8cd..1c6f835a5 100755
--- a/acl/save_acl.cgi
+++ b/acl/save_acl.cgi
@@ -10,6 +10,7 @@ require './acl-lib.pl';    ## no critic
 our (%in, %text, %config, %access, $base_remote_user, %gconfig,
      $config_directory);
 &ReadParse();
+$access{'acl'} || &error($text{'acl_emod'});
 
 my $who;
 if ($in{'_acl_group'}) {