TRKJ/gitea
2
0
Fork 0
mirror of https://gitee.com/gitea/gitea synced 2025-11-04 08:30:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

api: fix panic if anonymous user request admin API

Browse Source 
Add sign in check before check user account level
This commit is contained in:
Unknwon
2016-07-23 17:56:37 +08:00
parent 745167d57a
commit e63b2881b1
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
routers/api/v1/api.go
View File

@@ -103,7 +103,7 @@ func ReqBasicAuth() macaron.Handler {
func ReqAdmin() macaron.Handler { func ReqAdmin() macaron.Handler {
return func(ctx *context.Context) { return func(ctx *context.Context) {
if !ctx.User.IsAdmin { if !ctx.IsSigned || !ctx.User.IsAdmin {
ctx.Error(403) ctx.Error(403)
return return
} }