watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-20 04:25:39 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update permissions.

Browse source
This commit is contained in:
Brian Cao 2023-01-16 13:47:19 -08:00
parent f1db3d0451
commit dd2d9dc3f5
4 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/auth.js
View file

@ -35,7 +35,7 @@ export function isValidToken(token, validation) {
return false;
}
export async function allowQuery(req, type) {
export async function allowQuery(req, type, allowShareToken = true) {
const { id } = req.query;
const { userId, isAdmin, shareToken } = req.auth ?? {};
@ -44,7 +44,7 @@ export async function allowQuery(req, type) {
return true;
}
if (shareToken) {
if (allowShareToken && shareToken) {
return isValidToken(shareToken, { id });
}