fix: checkExclusiveAccess incorrectly includes root admin

This commit is contained in:
NGPixel 2020-09-11 17:37:50 -04:00
parent 7c0d6e2883
commit 02c3c66084

View File

@ -296,11 +296,6 @@ module.exports = {
checkExclusiveAccess(user, includePermissions = [], excludePermissions = []) { checkExclusiveAccess(user, includePermissions = [], excludePermissions = []) {
const userPermissions = user.permissions ? user.permissions : user.getGlobalPermissions() const userPermissions = user.permissions ? user.permissions : user.getGlobalPermissions()
// System Admin
if (userPermissions.includes('manage:system')) {
return true
}
// Check Inclusion Permissions // Check Inclusion Permissions
if (_.intersection(userPermissions, includePermissions).length < 1) { if (_.intersection(userPermissions, includePermissions).length < 1) {
return false return false