watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-20 12:35:38 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Rewrite admin.

Browse source
This commit is contained in:
Brian Cao 2022-12-25 22:00:20 -08:00
parent f4db04c3c6
commit 6cf6a97b4d
114 changed files with 2174 additions and 1820 deletions
Download patch file Download diff file Expand all files Collapse all files

6
pages/api/users/[id]/index.ts
View file

@ -26,7 +26,7 @@ export default async (
const { id } = req.query;
if (req.method === 'GET') {
if (await canViewUser(userId, id)) {
if (!isAdmin && !(await canViewUser(userId, id))) {
return unauthorized(res);
}
@ -36,7 +36,7 @@ export default async (
}
if (req.method === 'POST') {
if (await canUpdateUser(userId, id)) {
if (!isAdmin && !(await canUpdateUser(userId, id))) {
return unauthorized(res);
}
@ -70,7 +70,7 @@ export default async (
}
if (req.method === 'DELETE') {
if (isAdmin) {
if (!isAdmin) {
return unauthorized(res);
}

6
pages/api/users/[id]/password.ts
View file

@ -30,15 +30,15 @@ export default async (
const { current_password, new_password } = req.body;
const { id } = req.query;
const {
user: { id: userId },
user: { id: userId, isAdmin },
} = req.auth;
if (req.method === 'POST') {
if (canUpdateUser(userId, id)) {
if (!isAdmin && !(await canUpdateUser(userId, id))) {
return unauthorized(res);
}
const user = await getUser({ id });
const user = await getUser({ id }, { includePassword: true });
if (!checkPassword(current_password, user.password)) {
return badRequest(res, 'Current password is incorrect');

4
pages/api/users/index.ts
View file

@ -23,7 +23,7 @@ export default async (
} = req.auth;
if (req.method === 'GET') {
if (isAdmin) {
if (!isAdmin) {
return unauthorized(res);
}
@ -33,7 +33,7 @@ export default async (
}
if (req.method === 'POST') {
if (isAdmin) {
if (!isAdmin) {
return unauthorized(res);
}