From 4c6d0386b903797b80ffec4ba9e94ed044c9cf86 Mon Sep 17 00:00:00 2001
From: MeiMei <30769358+mei23@users.noreply.github.com>
Date: Mon, 30 Mar 2020 09:27:39 +0900
Subject: admin/accounts/createで一般ユーザーがアカウントを作成し放題なのを修正
 (#6205)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/server/api/endpoints/admin/accounts/create.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/server/api/endpoints')

diff --git a/src/server/api/endpoints/admin/accounts/create.ts b/src/server/api/endpoints/admin/accounts/create.ts
index ac80b579b7..16fe3e36da 100644
--- a/src/server/api/endpoints/admin/accounts/create.ts
+++ b/src/server/api/endpoints/admin/accounts/create.ts
@@ -18,7 +18,7 @@ export const meta = {
 
 export default define(meta, async (ps, me) => {
 	const noUsers = (await Users.count({})) === 0;
-	if (!noUsers && me == null) throw new Error('access denied');
+	if (!noUsers && !me?.isAdmin) throw new Error('access denied');
 
 	const { account, secret } = await signup(ps.username, ps.password);
 
-- 
cgit v1.2.3-freya