From 666ef499248f37f7ec962c03664ecd74beb86b41 Mon Sep 17 00:00:00 2001
From: shortcutme <tamas@zeronet.io>
Date: Tue, 6 Mar 2018 12:05:08 +0100
Subject: [PATCH] sidebarGetHtmlTag is an admin command

---
 plugins/Sidebar/SidebarPlugin.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/plugins/Sidebar/SidebarPlugin.py b/plugins/Sidebar/SidebarPlugin.py
index 6e89f35b..fe3bb720 100644
--- a/plugins/Sidebar/SidebarPlugin.py
+++ b/plugins/Sidebar/SidebarPlugin.py
@@ -429,6 +429,10 @@ class UiWebsocketPlugin(object):
         body.append("</li>")
 
     def actionSidebarGetHtmlTag(self, to):
+        permissions = self.getPermissions(to)
+        if "ADMIN" not in permissions:
+            return self.response(to, "You don't have permission to run this command")
+
         site = self.site
 
         body = []