Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-12-16 05:20:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: admin privilege overrides only apply to local categories

Browse Source
This commit is contained in:
Julian Lam
2025-12-03 12:14:05 -05:00
parent 4020e1be35
commit 7b194c6916
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/privileges/categories.js
View File

@@ -96,14 +96,16 @@ privsCategories.get = async function (cid, uid) {
'topics:tag', 'read', 'posts:view_deleted',
];
const [userPrivileges, isAdministrator, isModerator] = await Promise.all([
let [userPrivileges, isAdministrator, isModerator] = await Promise.all([
helpers.isAllowedTo(privs, uid, cid),
user.isAdministrator(uid),
user.isModerator(uid, cid),
]);
const combined = userPrivileges.map(allowed => allowed || isAdministrator);
const privData = _.zipObject(privs, combined);
if (utils.isNumber(cid)) {
userPrivileges = userPrivileges.map(allowed => allowed || isAdministrator);
}
const privData = _.zipObject(privs, userPrivileges);
const isAdminOrMod = isAdministrator || isModerator;
return await plugins.hooks.fire('filter:privileges.categories.get', {