ShinobiSystems
/
Shinobi
mirror of https://gitlab.com/Shinobi-Systems/Shinobi.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add permission check and failed response for monitor delete

merge-requests/63/head
Moe 2018-07-15 19:52:44 -07:00
parent 9dd8c2caf0
commit 4bc6a9bb3c
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
camera.js
View File

@ -6399,7 +6399,7 @@ app.all(['/:auth/configureMonitor/:ke/:id','/:auth/configureMonitor/:ke/:id/:f']
res.end(s.s(req.ret, null, 3))
}
}else{
if(!user.details.sub||user.details.allmonitors==='1'||user.details.monitor_edit.indexOf(req.params.id)>-1){
if(!user.details.sub || user.details.allmonitors==='1' || user.details.monitor_edit.indexOf(req.params.id)>-1 || hasRestrictions && user.details.monitor_create === '1'){
s.log(s.group[req.params.ke].mon_conf[req.params.id],{type:'Monitor Deleted',msg:'by user : '+user.uid});
req.params.delete=1;s.camera('stop',req.params);
s.tx({f:'monitor_delete',uid:user.uid,mid:req.params.id,ke:req.params.ke},'GRP_'+req.params.ke);
@ -6407,6 +6407,9 @@ app.all(['/:auth/configureMonitor/:ke/:id','/:auth/configureMonitor/:ke/:id/:f']
req.ret.ok=true;
req.ret.msg='Monitor Deleted by user : '+user.uid
res.end(s.s(req.ret, null, 3))
}else{
req.ret.msg=user.lang['Not Permitted'];
res.end(s.s(req.ret, null, 3))
}
}
})