Skip to content

Commit

Permalink
Fixed permissions.
Browse files Browse the repository at this point in the history
  • Loading branch information
@petersirka
petersirka committed Jun 7, 2023
1 parent 0292bd3 commit c904117
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 8 deletions.
4 changes: 2 additions & 2 deletions app.bundle
View file

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions plugins/files/index.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ function upload(db) {

var self = this;

if (!self.user.sa && (!self.user.allow_upload || (self.user.databases && !self.user.databases.includes(db)))) {
if (!self.user.sa && (!self.user.allow_upload || (self.user.databases && self.user.databases.length && !self.user.databases.includes(db)))) {
self.status = 401;
self.invalid('Not allowed');
return;
Expand Down Expand Up @@ -77,7 +77,7 @@ function upload_base64(db) {

var self = this;

if (!self.user.sa && (!self.user.allow_upload || (self.user.databases && !self.user.databases.includes(db)))) {
if (!self.user.sa && (!self.user.allow_upload || (self.user.databases && self.user.databases.length && !self.user.databases.includes(db)))) {
self.status = 401;
self.invalid('Not allowed');
return;
Expand Down Expand Up @@ -126,7 +126,7 @@ function upload_url(db) {

var self = this;

if (!self.user.sa && (!self.user.allow_upload || (self.user.databases && !self.user.databases.includes(db)))) {
if (!self.user.sa && (!self.user.allow_upload || (self.user.databases && self.user.databases.length && !self.user.databases.includes(db)))) {
self.status = 401;
self.invalid('Not allowed');
return;
Expand Down
6 changes: 3 additions & 3 deletions plugins/files/schemas/files.js
View file
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ NEWSCHEMA('Files', function(schema) {

var params = $.params;

if (!$.user.sa && $.user.databases && !$.user.databases.includes(params.db)) {
if (!$.user.sa && $.user.databases && $.user.databases.length && !$.user.databases.includes(params.db)) {
$.invalid(401);
return;
}
Expand Down Expand Up @@ -57,7 +57,7 @@ NEWSCHEMA('Files', function(schema) {

var params = $.params;

if (!$.user.sa && (($.user.databases && !$.user.databases.includes(params.db)) || $.user.allow_update)) {
if (!$.user.sa && (($.user.databases && $.user.databases.length && !$.user.databases.includes(params.db)) || $.user.allow_update)) {
$.invalid(401);
return;
}
Expand All @@ -73,7 +73,7 @@ NEWSCHEMA('Files', function(schema) {

var params = $.params;

if (!$.user.sa && (($.user.databases && !$.user.databases.includes(params.db)) || !$.user.allow_remove)) {
if (!$.user.sa && (($.user.databases && $.user.databases.length && !$.user.databases.includes(params.db)) || !$.user.allow_remove)) {
$.invalid(401);
return;
}
Expand Down

0 comments on commit c904117

Please sign in to comment.