Nemcio/CyberPanel
1
0
Fork 0
mirror of https://github.com/usmannasir/cyberpanel.git synced 2025-11-15 09:46:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

CloudLinux, CageFS and security improvements

Browse Source
This commit is contained in:
Usman Nasir
2019-07-16 23:23:16 +05:00
parent 5c8e25e0c5
commit 44983fab3c
85 changed files with 7689 additions and 3425 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
dns/dnsManager.py
View File

@@ -272,6 +272,12 @@ class DNSManager:
zoneDomain = data['selectedZone']
currentSelection = data['currentSelection']
admin = Administrator.objects.get(pk=userID)
if ACLManager.checkOwnership(zoneDomain, admin, currentACL) == 1:
pass
else:
return ACLManager.loadErrorJson()
domain = Domains.objects.get(name=zoneDomain)
records = Records.objects.filter(domain_id=domain.id)
@@ -336,11 +342,19 @@ class DNSManager:
if ACLManager.currentContextPermission(currentACL, 'addDeleteRecords') == 0:
return ACLManager.loadErrorJson('add_status', 0)
zoneDomain = data['selectedZone']
recordType = data['recordType']
recordName = data['recordName']
ttl = int(data['ttl'])
admin = Administrator.objects.get(pk=userID)
if ACLManager.checkOwnership(zoneDomain, admin, currentACL) == 1:
pass
else:
return ACLManager.loadError()
zone = Domains.objects.get(name=zoneDomain)
value = ""
@@ -503,6 +517,17 @@ class DNSManager:
id = data['id']
delRecord = Records.objects.get(id=id)
admin = Administrator.objects.get(pk=userID)
if currentACL['admin'] == 1:
pass
elif delRecord.domainOwner.admin == admin:
pass
else:
return ACLManager.loadErrorJson()
delRecord.delete()
final_dic = {'status': 1, 'delete_status': 1, 'error_message': "None"}
@@ -537,10 +562,16 @@ class DNSManager:
zoneDomain = data['zoneDomain']
currentACL = ACLManager.loadedACL(userID)
admin = Administrator.objects.get(pk=userID)
if ACLManager.currentContextPermission(currentACL, 'deleteZone') == 0:
return ACLManager.loadErrorJson('delete_status', 0)
if ACLManager.checkOwnership(zoneDomain, admin, currentACL) == 1:
pass
else:
return ACLManager.loadError()
delZone = Domains.objects.get(name=zoneDomain)
admin = Administrator.objects.get(pk=userID)
if currentACL['admin'] == 1: