fix: #12057, allow gmods to change user email

This commit is contained in:
Barış Soner Uşaklı
2023-10-03 20:42:43 -04:00
parent 56794cf869
commit 344ece8db5
3 changed files with 9 additions and 7 deletions

View File

@@ -413,10 +413,9 @@ usersAPI.getInviteGroups = async (caller, { uid }) => {
};
usersAPI.addEmail = async (caller, { email, skipConfirmation, uid }) => {
const canManageUsers = await privileges.admin.can('admin:users', caller.uid);
skipConfirmation = canManageUsers && skipConfirmation;
if (skipConfirmation) {
const isSelf = parseInt(caller.uid, 10) === parseInt(uid, 10);
const canEdit = await privileges.users.canEdit(caller.uid, uid);
if (skipConfirmation && canEdit && !isSelf) {
if (!email.length) {
await user.email.remove(uid);
} else {