kenmirrors/grocy
1
0
Fork 0
mirror of https://github.com/grocy/grocy.git synced 2025-08-16 18:54:35 +00:00
Code Issues Projects Releases Wiki Activity

Fixed permission check when deleting API keys (fixes #2204)

Browse Source
This commit is contained in:
Bernd Bestel
2023-04-30 22:32:08 +02:00
parent df4907f5d4
commit 7ee79ec56c
3 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
controllers/GenericEntityApiController.php
View File

@@ -89,6 +89,10 @@ class GenericEntityApiController extends BaseApiController
{
User::checkPermission($request, User::PERMISSION_EQUIPMENT);
}
elseif ($args['entity'] == 'api_keys')
{
// Always allowed
}
else
{
User::checkPermission($request, User::PERMISSION_MASTER_DATA_EDIT);