liz/wikijs-fork
liz/wikijs-fork
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: checkExclusiveAccess incorrectly includes root admin

Browse Source
This commit is contained in:
NGPixel 2020-09-11 17:37:50 -04:00
parent 7c0d6e2883
commit 02c3c66084
1 changed files with 0 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
server/core/auth.js
View File

@ -296,11 +296,6 @@ module.exports = {
checkExclusiveAccess(user, includePermissions = [], excludePermissions = []) { checkExclusiveAccess(user, includePermissions = [], excludePermissions = []) {
const userPermissions = user.permissions ? user.permissions : user.getGlobalPermissions() const userPermissions = user.permissions ? user.permissions : user.getGlobalPermissions()
// System Admin
if (userPermissions.includes('manage:system')) {
return true
}
// Check Inclusion Permissions // Check Inclusion Permissions
if (_.intersection(userPermissions, includePermissions).length < 1) { if (_.intersection(userPermissions, includePermissions).length < 1) {
return false return false