Merge pull request #1269 from tgstation/1266-NoSystemUser

Forcefully unauthorize TGS system user logins
This commit is contained in:
Jordan Brown
2021-06-01 11:51:42 -04:00
committed by GitHub
@@ -277,6 +277,9 @@ namespace Tgstation.Server.Host.Controllers
else
{
var canonicalUserName = Models.User.CanonicalizeName(ApiHeaders.Username);
if (canonicalUserName == Models.User.CanonicalizeName(Models.User.TgsSystemUserName))
return Unauthorized();
if (systemIdentity == null)
query = query.Where(x => x.CanonicalName == canonicalUserName);
else