Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-02 03:55:55 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: allow multiple privileges to be defined for a given admin socket call

Browse Source
This commit is contained in:
Julian Lam
2020-12-23 13:07:41 -05:00
parent f55dddb2be
commit 3aa5beb832
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/socket.io/admin.js
View File

@@ -41,8 +41,9 @@ SocketAdmin.before = async function (socket, method) {
}
// Check admin privileges mapping (if not in mapping, deny access)
const privilege = privileges.admin.socketMap[method];
if (privilege && await privileges.admin.can(privilege, socket.uid)) {
const privilegeSet = privileges.admin.socketMap[method].split(';');
const hasPrivilege = (await Promise.all(privilegeSet.map(async privilege => privileges.admin.can(privilege, socket.uid)))).some(Boolean);
if (privilegeSet.length && hasPrivilege) {
return;
}