fix: missing write:pages perm for edit existing pages (#1228)
This commit is contained in:
parent
a72a7b1cdf
commit
49819b41db
@ -1,6 +1,6 @@
|
|||||||
{
|
{
|
||||||
"name": "wiki",
|
"name": "wiki",
|
||||||
"version": "2.0.0-beta",
|
"version": "2.0.0",
|
||||||
"releaseDate": "2019-01-01T01:01:01.000Z",
|
"releaseDate": "2019-01-01T01:01:01.000Z",
|
||||||
"description": "A modern, lightweight and powerful wiki app built on NodeJS, Git and Markdown",
|
"description": "A modern, lightweight and powerful wiki app built on NodeJS, Git and Markdown",
|
||||||
"main": "wiki.js",
|
"main": "wiki.js",
|
||||||
|
@ -66,7 +66,7 @@ router.get(['/e', '/e/*'], async (req, res, next) => {
|
|||||||
}
|
}
|
||||||
|
|
||||||
if (page) {
|
if (page) {
|
||||||
if (!WIKI.auth.checkAccess(req.user, ['manage:pages'], pageArgs)) {
|
if (!WIKI.auth.checkAccess(req.user, ['write:pages', 'manage:pages'], pageArgs)) {
|
||||||
_.set(res.locals, 'pageMeta.title', 'Unauthorized')
|
_.set(res.locals, 'pageMeta.title', 'Unauthorized')
|
||||||
return res.render('unauthorized', { action: 'edit' })
|
return res.render('unauthorized', { action: 'edit' })
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user