admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2021-02-13 01:10:02 +00:00
parent cdb02f1283
commit 075347e539
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
server/AyaNova/biz/MemoBiz.cs
View File

@@ -209,8 +209,9 @@ namespace AyaNova.Biz
//skip validation if seeding
if (ServerBootConfig.SEEDING) return;
//Only can send a memo from your own account or alternatively as the SuperUser account due to v7Import or other import tasks
if (proposedObj.FromId != UserId && proposedObj.FromId != 1)
//Only can send a memo from your own account
//with bypass for import if superuser
if (proposedObj.FromId != UserId && UserId != 1)
{
AddError(ApiErrorCode.NOT_AUTHORIZED, "FromId", "No impersonation");
return;//no need to bother with any other validation, this is not allowed