add owner protection for reseller center

This commit is contained in:
Usman Nasir
2020-02-18 11:29:29 +05:00
parent 5631ed73d4
commit 25ef1ddbcb
2 changed files with 8 additions and 0 deletions

View File

@@ -908,9 +908,16 @@ def saveResellerChanges(request):
else: else:
return ACLManager.loadErrorJson() return ACLManager.loadErrorJson()
loggedUser = Administrator.objects.get(pk=val)
userToBeModified = Administrator.objects.get(userName=data['userToBeModified']) userToBeModified = Administrator.objects.get(userName=data['userToBeModified'])
newOwner = Administrator.objects.get(userName=data['newOwner']) newOwner = Administrator.objects.get(userName=data['newOwner'])
### Check user owners
if ACLManager.checkUserOwnerShip(currentACL, loggedUser, userToBeModified) == 0 or ACLManager.checkUserOwnerShip(currentACL, loggedUser, newOwner) == 0:
return ACLManager.loadErrorJson()
try: try:
if ACLManager.websitesLimitCheck(newOwner, data['websitesLimit'], userToBeModified) == 0: if ACLManager.websitesLimitCheck(newOwner, data['websitesLimit'], userToBeModified) == 0:
finalResponse = {'status': 0, finalResponse = {'status': 0,

View File

@@ -237,3 +237,4 @@ a:hover {
.btn-min-width { .btn-min-width {
min-width: 350px; min-width: 350px;
} }
saveResellerChanges