MyFavMirrors/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2025-11-07 12:52:54 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fixed access control check when managing all device groups.

Browse Source
This commit is contained in:
Ylian Saint-Hilaire
2020-07-14 12:10:21 -07:00
parent 44d6d2cd29
commit 2f6c2edbf2
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
views/default-mobile.handlebars
View File

@@ -4105,7 +4105,7 @@
if ((mesh == null) || (mesh.links == null)) { return 0; }
// Check if super user
if (userinfo.manageAllDeviceGroups) return 0xFFFFFFFF;
if (userinfo.manageAllDeviceGroups && (userid == userinfo._id)) return 0xFFFFFFFF;
// Check device group link permission
var rights = 0, r = mesh.links[userid];
@@ -4141,7 +4141,7 @@
if (mesh.links[userid] != null) { return true; } // User has visilibity thru a direct link
// Check if user user
if (userinfo.manageAllDeviceGroups) return true;
if (userinfo.manageAllDeviceGroups && (userid == userinfo._id)) return true;
// Check permissions thru user groups
var user = null;