Login war ausgehebelt / alle Admin-Rechte für alle
This commit is contained in:
@@ -34,7 +34,6 @@ module.exports.checkCredentials = function(name, pwd) {
|
|||||||
};
|
};
|
||||||
|
|
||||||
module.exports.hasAccess = function(req, section) {
|
module.exports.hasAccess = function(req, section) {
|
||||||
return true;
|
|
||||||
var name = module.exports.getName(req);
|
var name = module.exports.getName(req);
|
||||||
return (name && admins[name] && admins[name].rights && admins[name].rights[section] && admins[name].rights[module.exports.AdminRight.ADMIN]);
|
return (name && admins[name] && admins[name].rights && admins[name].rights[section] && admins[name].rights[module.exports.AdminRight.ADMIN]);
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user