Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user
CWE-863