1 files changed, 6 insertions, 0 deletions
diff --git a/app/model/issue.php b/app/model/issue.php
index 0954ad9..403e82e 100644
--- a/app/model/issue.php
+++ b/app/model/issue.php
@@ -52,6 +52,12 @@ if (isAction("iss-mesg-add"))
 
     if (isset(input()['closeIssue']))
     {
+        if (!$user->canModify($issue))
+        {
+            logError(ERROR, "You do not have permission to close this issue");
+            return;
+        }
+
         $issue->close($user);
         logError(NOTICE, "Issue #" . $issue->numb . " closed");
         $log = mesg::initNewLog("% closed issue", $user, $issue);