From e0fbc043c2efc205dd4fe8980209f97392280a6c Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Mon, 3 Aug 2026 10:36:58 -0700
Subject: [PATCH] Actually check ACL for restarting Nginx

---
 nginx/lang/en     | 1 +
 nginx/restart.cgi | 1 +
 2 files changed, 2 insertions(+)

diff --git a/nginx/lang/en b/nginx/lang/en
index f20bf7fc3..d8f6f919a 100644
--- a/nginx/lang/en
+++ b/nginx/lang/en
@@ -386,6 +386,7 @@ log_delete_user=Deleted user $1 in $2
 
 stop_err=Failed to stop Nginx
 stop_ecannot=You are not allowed to stop the webserver
+restart_ecannot=You are not allowed to apply the webserver configuration
 
 start_err=Failed to start Nginx
 start_ecannot=You are not allowed to start the webserver
diff --git a/nginx/restart.cgi b/nginx/restart.cgi
index 950adef8b..3ebb1a01b 100755
--- a/nginx/restart.cgi
+++ b/nginx/restart.cgi
@@ -7,6 +7,7 @@ require './nginx-lib.pl';
 our (%text, %in, %access);
 &ReadParse();
 &error_setup($text{'restart_err'});
+$access{'stop'} || &error($text{'restart_ecannot'});
 
 my $test = &test_config();
 $test && &error(&text('restart_etest',