Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix logical issue in panel_handler

Browse Source
This commit is contained in:
amcmanu3 2022-08-19 15:14:42 -04:00
parent 7a98331b1f
commit f75286e112
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
app/classes/web/panel_handler.py
View File

@ -1138,9 +1138,13 @@ class PanelHandler(BaseHandler):
)
return
if (
self.controller.users.get_user_by_id(user_id)["manager"]
!= exec_user["user_id"]
) and not exec_user["superuser"]:
(
self.controller.users.get_user_by_id(user_id)["manager"]
!= exec_user["user_id"]
)
and not exec_user["superuser"]
and str(exec_user["user_id"]) != str(user_id)
):
self.redirect(
"/panel/error?error=Unauthorized access: you cannot edit this user"
)