fix: page rules role check (#1447)
* Check rule.roles against permissions * Added Role Check to EXACT matching * Code Review Fixes
This commit is contained in:
parent
a694d26290
commit
7d23344c7a
@ -173,6 +173,7 @@ module.exports = {
|
||||
user.groups.forEach(grp => {
|
||||
const grpId = _.isObject(grp) ? _.get(grp, 'id', 0) : grp
|
||||
_.get(WIKI.auth.groups, `${grpId}.pageRules`, []).forEach(rule => {
|
||||
if(_.intersection(rule.roles, permissions).length > 0) {
|
||||
switch (rule.match) {
|
||||
case 'START':
|
||||
if (_.startsWith(`/${page.path}`, `/${rule.path}`)) {
|
||||
@ -207,6 +208,7 @@ module.exports = {
|
||||
}
|
||||
break
|
||||
}
|
||||
}
|
||||
})
|
||||
})
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user