Backport fix to avoid reading global config data.

dereuromark · Oct 28, 2019 · e693ad7 · e693ad7
1 parent 0bedd3a
commit e693ad7
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/Auth/AclTrait.php b/src/Auth/AclTrait.php
@@ -363,7 +363,11 @@ protected function _getAvailableRoles() {
 			return $this->_roles;
 		}
 
-		$roles = Configure::read($this->getConfig('rolesTable'));
+		$rolesTableKey = $this->getConfig('rolesTable');
+		if (!$rolesTableKey) {
+			throw new Exception('Invalid/missing rolesTable config');
+		}
+		$roles = Configure::read($rolesTableKey);
 		if (is_array($roles)) {
 			if ($this->getConfig('superAdminRole')) {
 				$key = $this->getConfig('superAdmin') ?: 'superadmin';