* fix: #9622

dont allow regular user to remove system tags

* refactor: add guest/spider check to isPrivileged

string/trim tag
This commit is contained in:
Barış Soner Uşaklı
2021-06-22 12:21:52 -04:00
committed by GitHub
parent 0d975bc4fb
commit 1bf263c4a2
2 changed files with 4 additions and 1 deletions

View File

@@ -159,6 +159,9 @@ User.getPrivileges = async function (uid) {
};
User.isPrivileged = async function (uid) {
if (!(parseInt(uid, 10) > 0)) {
return false;
}
const results = await User.getPrivileges(uid);
return results ? (results.isAdmin || results.isGlobalModerator || results.isModeratorOfAnyCategory) : false;
};