mirror of
https://github.com/usmannasir/cyberpanel.git
synced 2025-10-28 16:56:39 +01:00
Enhance API access control: Update user privilege check to verify administrator status through ACL instead of hardcoded username, improving security and flexibility.
https://github.com/usmannasir/cyberpanel/issues/1426#issuecomment-3315476878
This commit is contained in:
@@ -18,7 +18,8 @@ def router(request):
|
||||
|
||||
cm = CloudManager(data, admin)
|
||||
|
||||
if serverUserName != 'admin':
|
||||
# Check if user has administrator privileges through ACL
|
||||
if admin.acl.adminStatus != 1:
|
||||
return cm.ajaxPre(0, 'Only administrator can access API.')
|
||||
|
||||
if admin.api == 0:
|
||||
|
||||
Reference in New Issue
Block a user