Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-20 01:38:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: prevent update root role in DomainPermissionHandler (#984)

Browse Source
This commit is contained in:
Baoshuo authored and GitHub committed 2025-05-25 12:50:46 +01:00
1 parent ea2850a51e
commit 80a9c6a399
1 file changed
+1
Download Patch File Download Diff File Expand all files Collapse all files
packages/hydrooj/src/handler/domain.ts
+1
View File
@@ -214,6 +214,7 @@ class DomainPermissionHandler extends ManageHandler {
async post({ domainId }) { async post({ domainId }) {
const roles = {}; const roles = {};
for (const role in this.request.body) { for (const role in this.request.body) {
if (role === 'root') continue; // root role is not editable
const perms = this.request.body[role] instanceof Array const perms = this.request.body[role] instanceof Array
? this.request.body[role] ? this.request.body[role]
: [this.request.body[role]]; : [this.request.body[role]];