System-End/hackatime
1
0
Fork 0
mirror of https://github.com/System-End/hackatime.git synced 2026-04-20 00:35:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

double check admin key holders (#761)

Browse source
This commit is contained in:
Echo 2026-01-03 09:08:08 -05:00 • committed by GitHub
parent ae7d9c73fb
commit f406bec762
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
app/controllers/api/admin/application_controller.rb
View file

@ -13,7 +13,14 @@ module Api
if @admin_api_key
@current_user = @admin_api_key.user
@current_user.admin_level.in?([ "admin", "superadmin", "viewer" ])
unless @current_user.admin_level.in?([ "admin", "superadmin", "viewer" ])
@admin_api_key.revoke!
render json: { error: "lmao no perms" }, status: :unauthorized
false
else
true
end
else
render json: { error: "lmao no perms" }, status: :unauthorized
end