Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Enable changing more of yourself with superuser

Browse Source 
Enable modifying your own superuser status, permissions and roles if you
have superuser status
This commit is contained in:
luukas 2022-05-25 00:43:49 +03:00
parent b0d342e949
commit 6dadce2c9a
No known key found for this signature in database
GPG Key ID: CC4915E8D71FC044
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
app/classes/web/routes/api/users/user/index.py
View File

@ -186,9 +186,9 @@ class ApiUsersUserIndexHandler(BaseApiHandler):
)
if "superuser" in data:
if str(user["user_id"]) == str(user_id):
# Checks if user is trying to change super user status of self.
# We don't want that.
if str(user["user_id"]) == str(user_id) and not superuser:
# Checks if user is trying to change super user status
# of self without superuser. We don't want that.
return self.finish_json(
400, {"status": "error", "error": "INVALID_SUPERUSER_MODIFY"}
)
@ -197,9 +197,9 @@ class ApiUsersUserIndexHandler(BaseApiHandler):
data.pop("superuser")
if "permissions" in data:
if str(user["user_id"]) == str(user_id):
# Checks if user is trying to change permissions of self.
# We don't want that.
if str(user["user_id"]) == str(user_id) and not superuser:
# Checks if user is trying to change permissions
# of self without superuser. We don't want that.
return self.finish_json(
400, {"status": "error", "error": "INVALID_PERMISSIONS_MODIFY"}
)
@ -211,9 +211,9 @@ class ApiUsersUserIndexHandler(BaseApiHandler):
)
if "roles" in data:
if str(user["user_id"]) == str(user_id):
# Checks if user is trying to change roles of self.
# We don't want that.
if str(user["user_id"]) == str(user_id) and not superuser:
# Checks if user is trying to change roles of
# self without superuser. We don't want that.
return self.finish_json(
400, {"status": "error", "error": "INVALID_ROLES_MODIFY"}
)