From 1b03c423b94427c6eef855b9678b797c984c5f37 Mon Sep 17 00:00:00 2001
From: ksar <35605507+ksar-ksar@users.noreply.github.com>
Date: Thu, 22 Dec 2022 17:13:11 +0100
Subject: [PATCH 1/2] FIX #23281

---
 htdocs/admin/perms.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/htdocs/admin/perms.php b/htdocs/admin/perms.php
index d2f0d79e4f3..60f8c9d064a 100644
--- a/htdocs/admin/perms.php
+++ b/htdocs/admin/perms.php
@@ -226,7 +226,7 @@ if ($result) {
 		// Tick
 		if ($obj->bydefault == 1) {
 			print '<td class="center">';
-			print '<a class="reposition" href="perms.php?pid='.$obj->id.'&amp;action=remove">';
+			print '<a class="reposition" href="perms.php?pid='.$obj->id.'&amp;action=remove&token='.newToken().'">';
 			//print img_edit_remove();
 			print img_picto('', 'switch_on');
 			print '</a>';

From d0ea4760d9f8921c3e2761c84689f9c9b0904e4e Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@destailleur.fr>
Date: Wed, 28 Dec 2022 02:38:40 +0100
Subject: [PATCH 2/2] Update perms.php

---
 htdocs/admin/perms.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/htdocs/admin/perms.php b/htdocs/admin/perms.php
index 60f8c9d064a..8b1f6249d93 100644
--- a/htdocs/admin/perms.php
+++ b/htdocs/admin/perms.php
@@ -226,7 +226,7 @@ if ($result) {
 		// Tick
 		if ($obj->bydefault == 1) {
 			print '<td class="center">';
-			print '<a class="reposition" href="perms.php?pid='.$obj->id.'&amp;action=remove&token='.newToken().'">';
+			print '<a class="reposition" href="perms.php?pid='.$obj->id.'&action=remove&token='.newToken().'">';
 			//print img_edit_remove();
 			print img_picto('', 'switch_on');
 			print '</a>';