cyberpresidentvanellope/tgstation-server
1
0
Fork 0
mirror of https://github.com/tgstation/tgstation-server.git synced 2026-08-24 21:46:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix EngineController.Update permissions

Browse Source
This commit is contained in:
Jordan Dominion
2023-10-21 05:23:28 -04:00
parent 0ca70d8091
commit 7643e91f84
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Tgstation.Server.Host/Controllers/EngineController.cs
+9 -2
View File
@@ -151,8 +151,15 @@ namespace Tgstation.Server.Host.Controllers
var uploadingZip = model.UploadCustomZip == true;
var userByondRights = AuthenticationContext.InstancePermissionSet.EngineRights.Value;
if ((!userByondRights.HasFlag(EngineRights.InstallOfficialOrChangeActiveByondVersion) && !uploadingZip)
|| (!userByondRights.HasFlag(EngineRights.InstallCustomByondVersion) && uploadingZip))
var isByondEngine = model.EngineVersion.Engine.Value == EngineType.Byond;
var officialPerm = isByondEngine
? EngineRights.InstallOfficialOrChangeActiveByondVersion
: EngineRights.InstallOfficialOrChangeActiveOpenDreamVersion;
var customPerm = isByondEngine
? EngineRights.InstallCustomByondVersion
: EngineRights.InstallCustomOpenDreamVersion;
if ((!userByondRights.HasFlag(officialPerm) && !uploadingZip)
|| (!userByondRights.HasFlag(customPerm) && uploadingZip))
return Forbid();
// remove cruff fields