Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-19 17:38:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix PRIV_VIEW_ALL_DOMAIN

Browse Source
This commit is contained in:
undefined committed 2025-03-20 17:55:10 +00:00
1 parent 7fd01715bc
commit 24f61b8b27
2 files changed
+10 -9
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

packages/hydrooj/src/handler/domain.ts
+6 -3
View File
@@ -282,13 +282,16 @@ class DomainJoinHandler extends Handler {
async prepare({ domainId }, target: string = domainId) {
const [ddoc, dudoc] = await Promise.all([
domain.get(target),
domain.getDomainUser(target, this.user),
domain.collUser.findOne({ domainId, uid: this.user._id }),
]);
if (dudoc.join) throw new DomainJoinAlreadyMemberError(target, this.user._id);
const assignedRole = this.user.hasPriv(PRIV.PRIV_MANAGE_ALL_DOMAIN)
? 'root'
: dudoc?.role;
if (dudoc?.join) throw new DomainJoinAlreadyMemberError(target, this.user._id);
const r = await domain.getRoles(ddoc);
const roles = r.map((role) => role._id);
this.joinSettings = domain.getJoinSettings(ddoc, roles);
if (dudoc.role !== 'default') delete this.joinSettings;
if (assignedRole !== 'default') delete this.joinSettings;
else if (!this.joinSettings) throw new DomainJoinForbiddenError(target);
}