Fix permissions for non-admin users

master
Pierre Jaury 8 years ago
parent ef3284d6b4
commit 5c1441486b

@ -27,7 +27,7 @@ def get_user(user_email, admin=False):
if not user.domain in flask_login.current_user.get_managed_domains(): if not user.domain in flask_login.current_user.get_managed_domains():
if admin: if admin:
flask.abort(403) flask.abort(403)
elif not user == flask_login.current_user: elif not user.email == flask_login.current_user.email:
flask.abort(403) flask.abort(403)
return user return user

Loading…
Cancel
Save