Nemcio/CyberPanel
1
0
Fork 0
mirror of https://github.com/usmannasir/cyberpanel.git synced 2025-11-02 11:26:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Enhance API access control: Update user privilege check to verify administrator status through ACL instead of hardcoded username, improving security and flexibility.

Browse Source 
https://github.com/usmannasir/cyberpanel/issues/1426#issuecomment-3315476878
This commit is contained in:
Master3395
2025-09-21 18:46:44 +02:00
parent fafc757052
commit 61b0507703
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cloudAPI/views.py
View File

@@ -18,7 +18,8 @@ def router(request):
cm = CloudManager(data, admin) cm = CloudManager(data, admin)
if serverUserName != 'admin': # Check if user has administrator privileges through ACL
if admin.acl.adminStatus != 1:
return cm.ajaxPre(0, 'Only administrator can access API.') return cm.ajaxPre(0, 'Only administrator can access API.')
if admin.api == 0: if admin.api == 0: