Login war ausgehebelt / alle Admin-Rechte für alle
This commit is contained in:
@@ -34,7 +34,6 @@ module.exports.checkCredentials = function(name, pwd) {
|
||||
};
|
||||
|
||||
module.exports.hasAccess = function(req, section) {
|
||||
return true;
|
||||
var name = module.exports.getName(req);
|
||||
return (name && admins[name] && admins[name].rights && admins[name].rights[section] && admins[name].rights[module.exports.AdminRight.ADMIN]);
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user