From f93a720268bf37633fb67494ceb8aed0cc14ab5e Mon Sep 17 00:00:00 2001
From: "ivan.hrytsai" <ivan.hrytsai@magefan.com>
Date: Fri, 24 Apr 2026 16:37:13 +0300
Subject: [PATCH] 15303-Magefan-Blog-Extension-Security-Risks

---
 Controller/Adminhtml/Activate/Extension.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Controller/Adminhtml/Activate/Extension.php b/Controller/Adminhtml/Activate/Extension.php
index 5fc226b..5b21f94 100644
--- a/Controller/Adminhtml/Activate/Extension.php
+++ b/Controller/Adminhtml/Activate/Extension.php
@@ -22,6 +22,10 @@
 
 class Extension extends \Magento\Backend\App\Action
 {
+    /**
+     * ACL resource required to activate extensions.
+     */
+    public const ADMIN_RESOURCE = 'Magento_Config::config';
     /**
      * @var WriterInterface
      */