summaryrefslogtreecommitdiff
path: root/src/server
diff options
context:
space:
mode:
authorMeiMei <30769358+mei23@users.noreply.github.com>2020-03-30 09:27:39 +0900
committerGitHub <noreply@github.com>2020-03-30 09:27:39 +0900
commit4c6d0386b903797b80ffec4ba9e94ed044c9cf86 (patch)
tree66c42ecd5f8cb28edbb5d6feb494521163513709 /src/server
parentFix #6199 (#6201) (diff)
downloadsharkey-4c6d0386b903797b80ffec4ba9e94ed044c9cf86.tar.gz
sharkey-4c6d0386b903797b80ffec4ba9e94ed044c9cf86.tar.bz2
sharkey-4c6d0386b903797b80ffec4ba9e94ed044c9cf86.zip
admin/accounts/createで一般ユーザーがアカウントを作成し放題なのを修正 (#6205)
Diffstat (limited to 'src/server')
-rw-r--r--src/server/api/endpoints/admin/accounts/create.ts2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/server/api/endpoints/admin/accounts/create.ts b/src/server/api/endpoints/admin/accounts/create.ts
index ac80b579b7..16fe3e36da 100644
--- a/src/server/api/endpoints/admin/accounts/create.ts
+++ b/src/server/api/endpoints/admin/accounts/create.ts
@@ -18,7 +18,7 @@ export const meta = {
export default define(meta, async (ps, me) => {
const noUsers = (await Users.count({})) === 0;
- if (!noUsers && me == null) throw new Error('access denied');
+ if (!noUsers && !me?.isAdmin) throw new Error('access denied');
const { account, secret } = await signup(ps.username, ps.password);