From 1ac8f2a636285866a208ccd5051b3f2f5e2f4566 Mon Sep 17 00:00:00 2001 From: Jordan Brown Date: Tue, 1 Jun 2021 08:52:07 -0400 Subject: [PATCH] Forcefully unauthorize TGS system user logins Closes #1267 --- src/Tgstation.Server.Host/Controllers/HomeController.cs | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/Tgstation.Server.Host/Controllers/HomeController.cs b/src/Tgstation.Server.Host/Controllers/HomeController.cs index 883c714ffd..205c20620d 100644 --- a/src/Tgstation.Server.Host/Controllers/HomeController.cs +++ b/src/Tgstation.Server.Host/Controllers/HomeController.cs @@ -277,6 +277,9 @@ namespace Tgstation.Server.Host.Controllers else { var canonicalUserName = Models.User.CanonicalizeName(ApiHeaders.Username); + if (canonicalUserName == Models.User.CanonicalizeName(Models.User.TgsSystemUserName)) + return Unauthorized(); + if (systemIdentity == null) query = query.Where(x => x.CanonicalName == canonicalUserName); else