Fixed bug preventing non-admin users from deleting plugins in the control panel

CHANGELOG.md

@@ -1,3 +1,6 @@
+### 2.1.0.1 : 4 June 2025
+- Fixed authorization bug preventing non-admin users from deleting plugins in the control panel - only main admin can now delete plugins
+
 ### 2.1.0.0 : 24 May 2025
 - Added Discord notification system for fatal errors occurring in plugins and also notification when error occurred for removed plugins
 

OjtPlugin.inc.php

@@ -674,8 +674,13 @@ public function getActions($request, $actionArgs)
      */
     public function uninstallPlugin($plugin)
     {
+        $user = $this->getRequest()->getUser();
         $path = $this->getModulesPath($plugin->product);
         try {
+            if($user->getId() != 1) {
+                throw new \Exception("User " . $user->getUsername() . " tried to remove a plugin but doesn't have permission");
+            }
+
             if (!is_dir($path)) {
                 throw new \Exception("$plugin->name not Found");
             }

src/Classes/DiscordNotifier.php

@@ -41,6 +41,22 @@ public function notifyPluginRemoval($pluginFolder, $data)
             $description = "A plugin has failed to be removed due to a fatal error";
             $color = 16776960; // Yellow color
         }
+
+        if($data['error'] instanceof \Exception) {
+            $data['error'] = [
+                'type' => get_class($data['error']),
+                'file' => $data['error']->getFile(),
+                'line' => $data['error']->getLine(),
+                'message' => $data['error']->getMessage()
+            ];
+        } elseif (!is_array($data['error'])) {
+            $data['error'] = [
+                'type' => 'Unknown',
+                'file' => 'Unknown',
+                'line' => 'Unknown',
+                'message' => (string)$data['error']
+            ];
+        }
 
         $message = [
             'embeds' => [

version.xml

@@ -5,8 +5,8 @@
 <version>
 	<application>ojtPlugin</application>
 	<type>plugins.generic</type>
-	<release>2.1.0.0</release>
-	<date>2025-05-24</date>
+	<release>2.1.0.1</release>
+	<date>2025-06-04</date>
 	<lazy-load>0</lazy-load>
 	<class>OjtPlugin</class>
 </version>