Cutlery/Kavita
1
0
Fork 0
mirror of https://github.com/Kareadita/Kavita.git synced 2025-07-09 03:04:19 -04:00
Code Issues Packages Projects Releases Wiki Activity

Only admins should be able to create new users (#895)

Browse Source
This commit is contained in:
Joseph Milazzo 2022-01-05 10:55:00 -08:00 committed by GitHub
parent 3089075324
commit a6d8c833e6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
API/Controllers/AccountController.cs
View File

@ -13,6 +13,7 @@ using API.Interfaces.Services;
using API.Services; using API.Services;
using AutoMapper; using AutoMapper;
using Kavita.Common; using Kavita.Common;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Identity; using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc; using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore; using Microsoft.EntityFrameworkCore;
@ -78,6 +79,7 @@ namespace API.Controllers
/// </summary> /// </summary>
/// <param name="registerDto"></param> /// <param name="registerDto"></param>
/// <returns></returns> /// <returns></returns>
[Authorize(Policy = "RequireAdminRole")]
[HttpPost("register")] [HttpPost("register")]
public async Task<ActionResult<UserDto>> Register(RegisterDto registerDto) public async Task<ActionResult<UserDto>> Register(RegisterDto registerDto)
{ {

2
UI/Web/src/app/admin/admin-routing.module.ts
View File

@ -4,7 +4,7 @@ import { AdminGuard } from '../_guards/admin.guard';
import { DashboardComponent } from './dashboard/dashboard.component'; import { DashboardComponent } from './dashboard/dashboard.component';
const routes: Routes = [ const routes: Routes = [
{path: '**', component: DashboardComponent, pathMatch: 'full'}, {path: '**', component: DashboardComponent, pathMatch: 'full', canActivate: [AdminGuard]},
{ {
runGuardsAndResolvers: 'always', runGuardsAndResolvers: 'always',
canActivate: [AdminGuard], canActivate: [AdminGuard],