Nemcio/CyberPanel
1
0
Fork 0
mirror of https://github.com/usmannasir/cyberpanel.git synced 2025-11-08 06:16:08 +01:00
Code Issues Packages Projects Releases Wiki Activity

security fix: CP-12: CP-12: Admin Packages Modify Package

Browse Source
This commit is contained in:
Usman Nasir
2021-08-07 11:44:35 +05:00
parent 276ebdc6fb
commit 3aa9deb112
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
packages/packagesManager.py
View File

@@ -148,6 +148,11 @@ class PackagesManager:
modifyPack = Package.objects.get(packageName=packageName) modifyPack = Package.objects.get(packageName=packageName)
## Check package ownership
admin = Administrator.objects.get(pk=userID)
if ACLManager.CheckPackageOwnership(modifyPack, admin, currentACL) == 0:
return ACLManager.loadErrorJson('deleteStatus', 0)
diskSpace = modifyPack.diskSpace diskSpace = modifyPack.diskSpace
bandwidth = modifyPack.bandwidth bandwidth = modifyPack.bandwidth
ftpAccounts = modifyPack.ftpAccounts ftpAccounts = modifyPack.ftpAccounts