From e252446ad1bdccbfe5a4cd3698ead2b327f1648c Mon Sep 17 00:00:00 2001
From: zhaoke <zhaoke@easycorp.ltd>
Date: Tue, 5 Sep 2023 15:44:33 +0800
Subject: [PATCH] * Add priv of instance.

---
 module/instance/control.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/module/instance/control.php b/module/instance/control.php
index 73b8ff0f7b..7a8914972f 100644
--- a/module/instance/control.php
+++ b/module/instance/control.php
@@ -770,6 +770,7 @@ class instance extends control
      */
     public function ajaxDBAuthUrl()
     {
+        if(!commonModel::hasPriv('instance', 'view')) $this->loadModel('common')->deny('instance', 'view', false);
         $post = fixer::input('post')
             ->setDefault('namespace', 'default')
             ->setDefault('instanceID', 0)