MyFavMirrors/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2025-11-10 05:59:40 -05:00
Code Issues Packages Projects Releases Wiki Activity

Meshctrl.js now shows access denies if you can't access users list.

Browse Source
This commit is contained in:
Ylian Saint-Hilaire
2020-06-12 13:04:23 -07:00
parent 442a3029a3
commit 89e126b976
2 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
meshuser.js
View File

@@ -1291,7 +1291,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
case 'users':
{
// Request a list of all users
if ((user.siteadmin & 2) == 0) break;
if ((user.siteadmin & 2) == 0) { if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'users', responseid: command.responseid, result: 'Access denied' })); } catch (ex) { } } break; }
var docs = [];
for (i in parent.users) {
if (((obj.crossDomain === true) || (parent.users[i].domain == domain.id)) && (parent.users[i].name != '~')) {