Cutlery/Kavita
1
0
Fork 0
mirror of https://github.com/Kareadita/Kavita.git synced 2025-06-03 05:34:21 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix: error when resetting password of a non admin user (#252)

Browse Source 
Fixes #246
This commit is contained in:
Leonardo Dias 2021-06-03 14:17:57 -03:00 committed by GitHub
parent 03c9b7a11d
commit b38ea8186e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
API/Controllers/AccountController.cs
View File

@ -45,9 +45,9 @@ namespace API.Controllers
{ {
_logger.LogInformation("{UserName} is changing {ResetUser}'s password", User.GetUsername(), resetPasswordDto.UserName); _logger.LogInformation("{UserName} is changing {ResetUser}'s password", User.GetUsername(), resetPasswordDto.UserName);
var user = await _userManager.Users.SingleAsync(x => x.UserName == resetPasswordDto.UserName); var user = await _userManager.Users.SingleAsync(x => x.UserName == resetPasswordDto.UserName);
var isAdmin = await _userManager.IsInRoleAsync(user, PolicyConstants.AdminRole);
if (resetPasswordDto.UserName != User.GetUsername() && !isAdmin) return Unauthorized("You are not permitted to this operation."); if (resetPasswordDto.UserName != User.GetUsername() && !User.IsInRole(PolicyConstants.AdminRole))
return Unauthorized("You are not permitted to this operation.");
// Validate Password // Validate Password
foreach (var validator in _userManager.PasswordValidators) foreach (var validator in _userManager.PasswordValidators)