From 80a9c6a399cad36961716aaeb2b3f67618190564 Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Sun, 25 May 2025 19:50:46 +0800
Subject: [PATCH] fix: prevent update root role in DomainPermissionHandler
 (#984)

---
 packages/hydrooj/src/handler/domain.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages/hydrooj/src/handler/domain.ts b/packages/hydrooj/src/handler/domain.ts
index 85013ca08..d6f6ec27d 100644
--- a/packages/hydrooj/src/handler/domain.ts
+++ b/packages/hydrooj/src/handler/domain.ts
@@ -214,6 +214,7 @@ class DomainPermissionHandler extends ManageHandler {
     async post({ domainId }) {
         const roles = {};
         for (const role in this.request.body) {
+            if (role === 'root') continue; // root role is not editable
             const perms = this.request.body[role] instanceof Array
                 ? this.request.body[role]
                 : [this.request.body[role]];