Login war ausgehebelt / alle Admin-Rechte für alle

This commit is contained in:
Sebastian Seedorf
2016-03-25 17:13:04 +01:00
parent 61a8d484e6
commit 87eb8ff35e

View File

@@ -34,7 +34,6 @@ module.exports.checkCredentials = function(name, pwd) {
};
module.exports.hasAccess = function(req, section) {
return true;
var name = module.exports.getName(req);
return (name && admins[name] && admins[name].rights && admins[name].rights[section] && admins[name].rights[module.exports.AdminRight.ADMIN]);
};