fixes #4112

Closes #4112

Merge request studip/studip!2957

1 files changed, 15 insertions, 0 deletions

diff --git a/app/controllers/accessibility/forms.php b/app/controllers/accessibility/forms.php
index f4f9adf..476f2fe 100644
--- a/app/controllers/accessibility/forms.php
+++ b/app/controllers/accessibility/forms.php
@@ -3,6 +3,21 @@ class Accessibility_FormsController extends StudipController
 {
     protected $with_session = true;
 
+    public function before_filter(&$action, &$args)
+    {
+        parent::before_filter($action, $args);
+
+        if (
+            Config::get()->REPORT_BARRIER_MODE === 'off'
+            || (
+                Config::get()->REPORT_BARRIER_MODE === 'logged-in'
+                && !User::findCurrent()
+            )
+        ) {
+            throw new AccessDeniedException();
+        }
+    }
+
     public function report_barrier_action()
     {
         PageLayout::setTitle(_('Barriere melden'));