chamomind/jws-backend
chamomind/jws-backend
7
0
Fork 0
Code Issues Projects 1 Releases Packages 1 Wiki Activity Actions

fix: fix no perm

Browse source
This commit is contained in:
Methapon Metanipat 2024-09-05 11:03:45 +07:00
parent a8ad8e37d4
commit 5d32e2dca5
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/controllers/02-user-controller.ts
View file

@ -381,7 +381,7 @@ export class UserController extends Controller {
const THROW_PERM_MSG = "You do not have permission to perform this action.";
const THROW_PERM_CODE = "noPermission";
if (setRoleIndex < userRoleIndex) {
if (setRoleIndex !== -1 && setRoleIndex < userRoleIndex) {
throw new HttpError(HttpStatus.FORBIDDEN, THROW_PERM_MSG, THROW_PERM_CODE);
}
if (!globalAllow(req.user)) {