Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-20 01:38:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

core: do not allow deleting system domain

Browse Source
This commit is contained in:
undefined committed 2022-01-12 10:58:20 +08:00
1 parent 148dbffa7a
commit 8144e85c14
2 files changed
+5 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

packages/hydrooj/package.json
+1 -1
View File
@@ -1,6 +1,6 @@
{ {
"name": "hydrooj", "name": "hydrooj",
"version": "3.3.7", "version": "3.3.8",
"bin": "bin/hydrooj.js", "bin": "bin/hydrooj.js",
"main": "src/loader", "main": "src/loader",
"module": "src/loader", "module": "src/loader",
packages/hydrooj/src/handler/domain.ts
+4 -3
View File
@@ -99,10 +99,11 @@ class DomainEditHandler extends ManageHandler {
this.response.redirect = this.url('domain_dashboard'); this.response.redirect = this.url('domain_dashboard');
} }
async postDelete({ password }) { async postDelete({ domainId, password }) {
this.user.checkPassword(password); this.user.checkPassword(password);
if (this.domain.owner === this.user._id) throw new ForbiddenError('You are not the owner of this domain.'); if (domainId === 'system') throw new ForbiddenError('You are not allowed to delete system domain');
await domain.del(this.domainId); if (this.domain.owner !== this.user._id) throw new ForbiddenError('You are not the owner of this domain.');
await domain.del(domainId);
this.response.redirect = this.url('home_domain', { domainId: 'system' }); this.response.redirect = this.url('home_domain', { domainId: 'system' });
} }
} }