Mirrors/audiobookshelf
Mirrors/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-01-22 00:07:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix:Updating root user #3366

Browse Source
This commit is contained in:
advplyr 2024-09-02 16:12:57 -05:00
parent f194c5be0e
commit 60e348fcc1
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
server/controllers/UserController.js
View File

@ -205,9 +205,12 @@ class UserController {
async update(req, res) {
const user = req.reqUser
if (user.type === 'root' && !req.user.isRoot) {
if (user.isRoot && !req.user.isRoot) {
Logger.error(`[UserController] Admin user "${req.user.username}" attempted to update root user`)
return res.sendStatus(403)
} else if (user.isRoot) {
// Root user cannot update type
delete req.body.type
}
const updatePayload = req.body