From ef24ff74c8380a0376d178ec56810627d894136d Mon Sep 17 00:00:00 2001
From: Davide Beatrici <git@davidebeatrici.dev>
Date: Thu, 4 Feb 2021 06:12:11 +0100
Subject: [PATCH] Cedar/Admin.c: Restrict StGetProtoOptions() access to server
 administrators

This is in order to protect the WireGuard private key.
---
 src/Cedar/Admin.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/Cedar/Admin.c b/src/Cedar/Admin.c
index 65703810..59c05939 100644
--- a/src/Cedar/Admin.c
+++ b/src/Cedar/Admin.c
@@ -10171,6 +10171,8 @@ UINT StGetProtoOptions(ADMIN *a, RPC_PROTO_OPTIONS *t)
 	UINT ret = ERR_NO_ERROR;
 	LIST *options;
 
+	SERVER_ADMIN_ONLY;
+
 	if (proto == NULL)
 	{
 		return ERR_NOT_SUPPORTED;