fix: update restricted tables for superadmin backup restoration

JohnDuprey · JohnDuprey · commit 25a06e35e3cb · 2026-04-27T14:40:34.000-04:00
diff --git a/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecRestoreBackup.ps1 b/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecRestoreBackup.ps1
@@ -14,7 +14,7 @@ function Invoke-ExecRestoreBackup {
     $AzureTableTypes = @(
         [string], [int], [long], [double], [bool], [datetime], [guid], [byte[]]
     )
-    $RestrictedTables = @('AccessRoleGroups', 'CustomRoles') # tables that require superadmin to restore
+    $RestrictedTables = @('AccessRoleGroups', 'AccessIPRanges', 'CustomRoles') # tables that require superadmin to restore
 
     # Resolve the calling user's roles, including Entra group-based roles
     $CallingUser = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($Request.Headers.'x-ms-client-principal')) | ConvertFrom-Json

Original file line number	Diff line number	Diff line change
`@@ -14,7 +14,7 @@ function Invoke-ExecRestoreBackup {`
`14`	`14`	`$AzureTableTypes = @(`
`15`	`15`	`[string], [int], [long], [double], [bool], [datetime], [guid], [byte[]]`
`16`	`16`	`)`
`17`		`- $RestrictedTables = @('AccessRoleGroups', 'CustomRoles') # tables that require superadmin to restore`
	`17`	`+ $RestrictedTables = @('AccessRoleGroups', 'AccessIPRanges', 'CustomRoles') # tables that require superadmin to restore`
`18`	`18`
`19`	`19`	`# Resolve the calling user's roles, including Entra group-based roles`
`20`	`20`	`$CallingUser = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($Request.Headers.'x-ms-client-principal')) \| ConvertFrom-Json`