mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-11-14 01:45:47 +01:00
changing admin API calls to return 404 if unauthenticated, and redirect user to login for regular URL. closes #1885
This commit is contained in:
@@ -16,7 +16,9 @@ var app,
|
||||
|
||||
middleware.isAdmin = function(req, res, next) {
|
||||
if (!req.user) {
|
||||
return res.redirect(nconf.get('relative_path') + '/login?next=admin');
|
||||
return res.json(404, {
|
||||
error: 'not-found'
|
||||
});
|
||||
}
|
||||
|
||||
user.isAdministrator((req.user && req.user.uid) ? req.user.uid : 0, function (err, isAdmin) {
|
||||
|
||||
Reference in New Issue
Block a user