diff --git a/app/classes/web/ajax_handler.py b/app/classes/web/ajax_handler.py index 13def1a6..9be31b99 100644 --- a/app/classes/web/ajax_handler.py +++ b/app/classes/web/ajax_handler.py @@ -114,8 +114,6 @@ class AjaxHandler(BaseHandler): if api_key is not None: superuser = superuser and api_key.superuser - server_id = self.get_argument("id", None) - if page == "send_order": self.controller.users.update_server_order( exec_user["user_id"], bleach.clean(self.get_argument("order")) diff --git a/app/classes/web/panel_handler.py b/app/classes/web/panel_handler.py index ba1ac472..f674b1fb 100644 --- a/app/classes/web/panel_handler.py +++ b/app/classes/web/panel_handler.py @@ -1415,38 +1415,6 @@ class PanelHandler(BaseHandler): template = "panel/panel_edit_role.html" - elif page == "remove_role": - role_id = bleach.clean(self.get_argument("id", None)) - - if ( - not superuser - and self.controller.roles.get_role(role_id)["manager"] - != exec_user["user_id"] - ): - self.redirect( - "/panel/error?error=Unauthorized access: not superuser not" - " role manager" - ) - return - if role_id is None: - self.redirect("/panel/error?error=Invalid Role ID") - return - # does this user id exist? - target_role = self.controller.roles.get_role(role_id) - if not target_role: - self.redirect("/panel/error?error=Invalid Role ID") - return - - self.controller.roles.remove_role(role_id) - - self.controller.management.add_to_audit_log( - exec_user["user_id"], - f"Removed role {target_role['role_name']} (RID:{role_id})", - server_id=0, - source_ip=self.get_remote_ip(), - ) - self.redirect("/panel/panel_config") - elif page == "activity_logs": page_data["audit_logs"] = self.controller.management.get_actity_log()