BradNut/umami
1
0
Fork 0
mirror of https://github.com/BradNut/umami synced 2025-09-08 17:40:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix password change issue for non-admin accounts.

Browse source
This commit is contained in:
Mike Cao 2020-11-28 13:28:52 -08:00
parent 0654b7b873
commit 1b172d214b
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pages/api/account/password.js
View file

@ -9,7 +9,7 @@ export default async (req, res) => {
const { user_id: auth_user_id, is_admin } = req.auth;
const { user_id, current_password, new_password } = req.body;
if (!is_admin || user_id !== auth_user_id) {
if (!is_admin && user_id !== auth_user_id) {
return unauthorized(res);
}