NussNougate/crafty-4
2
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2025-01-31 21:06:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix general user can view any api-key page

Browse Source
This commit is contained in:
Andrew 2022-06-18 17:02:10 -04:00
parent 72f97e4ff0
commit 37765dbebc
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/classes/web/panel_handler.py
View File

@ -1058,6 +1058,9 @@ class PanelHandler(BaseHandler):
if user_id is None: if user_id is None:
self.redirect("/panel/error?error=Invalid User ID") self.redirect("/panel/error?error=Invalid User ID")
return return
if user_id != exec_user["user_id"] or not exec_user["superuser"]:
self.redirect("/panel/error?error=Invalid User ID")
return
template = "panel/panel_edit_user_apikeys.html" template = "panel/panel_edit_user_apikeys.html"