1 files changed, 10 insertions, 0 deletions
diff --git a/app/controllers/evaluation/profiles.php b/app/controllers/evaluation/profiles.php
index 06e7555..72bd6f6 100644
--- a/app/controllers/evaluation/profiles.php
+++ b/app/controllers/evaluation/profiles.php
@@ -1,6 +1,16 @@
 <?php
 class Evaluation_ProfilesController extends AuthenticatedController
 {
+    public function before_filter(&$action, &$args)
+    {
+        parent::before_filter($action, $args);
+        $current_user = User::findCurrent();
+        if (!($current_user->hasPermissionLevel('root') ||
+            $current_user->hasRole('Zentraler Evaluationsadmin'))) {
+            throw new AccessDeniedException();
+        }
+    }
+
     public function index_action(): void
     {
         Navigation::activateItem('/evaluation/profiles');