rodrigo/genieacs
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix write access level in API

Browse Source
This commit is contained in:
Shweelan Samson authored and Zaid Abdulla committed 2018-12-27 01:21:18 -08:00
1 parent 11902fefd1
commit cae54613a2
1 file changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files
server/api.js
+3 -3
View File
@@ -296,7 +296,7 @@ for (const [resource, flags] of Object.entries(resources)) {
const authorizer = ctx.state.authorizer; const authorizer = ctx.state.authorizer;
const filter = ["=", ["PARAM", RESOURCE_IDS[resource]], ctx.params.id]; const filter = ["=", ["PARAM", RESOURCE_IDS[resource]], ctx.params.id];
if (!authorizer.hasAccess(resource, 2)) { if (!authorizer.hasAccess(resource, 3)) {
logUnauthorizedWarning(log); logUnauthorizedWarning(log);
return void next(); return void next();
} }
@@ -410,7 +410,7 @@ router.post("/devices/:id/tasks", async (ctx, next) => {
const authorizer = ctx.state.authorizer; const authorizer = ctx.state.authorizer;
const filter = ["=", ["PARAM", "DeviceID.ID"], ctx.params.id]; const filter = ["=", ["PARAM", "DeviceID.ID"], ctx.params.id];
if (!authorizer.hasAccess("devices", 2)) { if (!authorizer.hasAccess("devices", 3)) {
logUnauthorizedWarning(log); logUnauthorizedWarning(log);
return void next(); return void next();
} }
@@ -445,7 +445,7 @@ router.post("/devices/:id/tags", async (ctx, next) => {
const authorizer = ctx.state.authorizer; const authorizer = ctx.state.authorizer;
const filter = ["=", ["PARAM", "DeviceID.ID"], ctx.params.id]; const filter = ["=", ["PARAM", "DeviceID.ID"], ctx.params.id];
if (!authorizer.hasAccess("devices", 2)) { if (!authorizer.hasAccess("devices", 3)) {
logUnauthorizedWarning(log); logUnauthorizedWarning(log);
return void next(); return void next();
} }