Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix bug where su cannot edit general user password

Browse Source
This commit is contained in:
amcmanu3 2023-11-29 21:30:29 -05:00
parent 8bad0fb0a9
commit 74c0e8b23a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/classes/web/routes/api/users/user/index.py
View File

@ -215,7 +215,7 @@ class ApiUsersUserIndexHandler(BaseApiHandler):
user_obj = HelperUsers.get_user_model(user_id) user_obj = HelperUsers.get_user_model(user_id)
if "password" in data and str(user["user_id"]) != str(user_id): if "password" in data and str(user["user_id"]) != str(user_id):
if str(user["user_id"]) != str(user_obj.manager): if str(user["user_id"]) != str(user_obj.manager) and not user["superuser"]:
# TODO: edit your own password # TODO: edit your own password
return self.finish_json( return self.finish_json(
400, {"status": "error", "error": "INVALID_PASSWORD_MODIFY"} 400, {"status": "error", "error": "INVALID_PASSWORD_MODIFY"}