Blocked user group creation when domain is in LDAP mode.

This commit is contained in:
Ylian Saint-Hilaire 2023-09-24 12:00:33 -07:00
parent 94812f53b2
commit 604d50585b
2 changed files with 10 additions and 1 deletions

View File

@ -1490,6 +1490,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
{
var ugrpdomain, err = null;
try {
// Check if we are in a mode that does not allow manual user group creation
if (domain.auth == 'ldap') { err = "Not allowed in LDAP mode"; }
// Check if we have new group restriction
if ((user.siteadmin & SITERIGHT_USERGROUPS) == 0) { err = "Permission denied"; }

View File

@ -37,6 +37,7 @@
"sample-config-advanced.json"
],
"dependencies": {
"@yetzt/nedb": "1.8.0",
"archiver": "5.3.2",
"body-parser": "1.20.2",
"cbor": "5.2.0",
@ -46,10 +47,15 @@
"express-handlebars": "5.3.5",
"express-ws": "5.0.2",
"ipcheck": "0.1.0",
"ldapauth-fork": "5.0.5",
"loadavg-windows": "1.1.1",
"minimist": "1.2.8",
"multiparty": "4.2.3",
"@yetzt/nedb": "1.8.0",
"node-forge": "1.3.1",
"node-pushover": "1.0.0",
"node-windows": "0.1.14",
"otplib": "10.2.3",
"ssh2": "1.14.0",
"ua-parser-js": "1.0.36",
"ws": "8.14.2",
"yauzl": "2.10.0"