diff options
| author | rubenwardy <rw@rubenwardy.com> | 2020-02-23 20:12:32 +0000 |
|---|---|---|
| committer | rubenwardy <rw@rubenwardy.com> | 2020-02-23 20:12:32 +0000 |
| commit | a60786d32c93ad4169d50c7c98341084b1996019 (patch) | |
| tree | a2afdf0c5f93c6d180a42332b9e2fbe4e2faca4c /app/models.py | |
| parent | 2976afd5d187784c7a559d3ec6f878ac4c8fecdf (diff) | |
| download | cheatdb-a60786d32c93ad4169d50c7c98341084b1996019.tar.xz | |
Fix non-admin users not being able to set profile URLs
Diffstat (limited to 'app/models.py')
| -rw-r--r-- | app/models.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/app/models.py b/app/models.py index 86136f2..eff06b6 100644 --- a/app/models.py +++ b/app/models.py @@ -93,6 +93,7 @@ class Permission(enum.Enum): UNAPPROVE_PACKAGE = "UNAPPROVE_PACKAGE" TOPIC_DISCARD = "TOPIC_DISCARD" CREATE_TOKEN = "CREATE_TOKEN" + CHANGE_PROFILE_URLS = "CHANGE_PROFILE_URLS" # Only return true if the permission is valid for *all* contexts # See Package.checkPerm for package-specific contexts @@ -192,7 +193,7 @@ class User(db.Model, UserMixin): return user.rank.atLeast(UserRank.EDITOR) elif perm == Permission.CHANGE_RANK or perm == Permission.CHANGE_DNAME: return user.rank.atLeast(UserRank.MODERATOR) - elif perm == Permission.CHANGE_EMAIL: + elif perm == Permission.CHANGE_EMAIL or perm == Permission.CHANGE_PROFILE_URLS: return user == self or (user.rank.atLeast(UserRank.MODERATOR) and user.rank.atLeast(self.rank)) elif perm == Permission.CREATE_TOKEN: if user == self: |