Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-28 17:46:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add privilege for accessing user information (#7859)

Browse Source 
* Add view users info global privilege

* Show user ip only to global mods and admins

* fix missing comma

* Hide link for users without correct privilege

* move getting privilege information to getAllData

* Hide the link from Global Moderators as well

* Give Global Moderator view:users:info privilege

* Restrict ip in post menu to view:users:info

* add some trailing commas....

* Add privilege to categories test

* Add group privilege to categories test

* add upgrade script

* fix style for TravisCI

* more styling - change spaces to tabs

* some more styling fixes (hopefully final one)

* fix style for Travis CI

* hide ip in chat messages

* Don't show even hidden ips on user profile page
This commit is contained in:
Opliko
2019-09-17 18:02:52 +00:00
committed by Barış Soner Uşaklı
parent 781b3f1a9a
commit b9583ed838
10 changed files with 69 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/socket.io/modules.js
View File

@@ -280,7 +280,7 @@ SocketModules.chats.getMessages = async function (socket, data) {
};
SocketModules.chats.getIP = async function (socket, mid) {
const allowed = await user.isAdminOrGlobalMod(socket.uid);
const allowed = await privileges.global.can('view:users:info', socket.uid);
if (!allowed) {
throw new Error('[[error:no-privilege]]');
}