yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-12-27 07:03:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

Lowercase action to avoid bug with permission

Browse Source
This commit is contained in:
Aurelsicoko 2018-01-25 17:08:39 +01:00
parent 1d98cdd8a4
commit 7862899ed6
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
packages/strapi-plugin-users-permissions/services/UsersPermissions.js
View File

@ -26,7 +26,7 @@ module.exports = {
role: role._id || role.id,
type,
controller,
action,
action: action.toLowerCase(),
...params.permissions[type].controllers[controller][action]
}));
});
@ -203,7 +203,7 @@ module.exports = {
.map(controller => {
const actions = Object.keys(strapi.api[api].controllers[controller])
.filter(action => _.isFunction(strapi.api[api].controllers[controller][action]))
.map(action => `application.${controller}.${action}`);
.map(action => `application.${controller}.${action.toLowerCase()}`);
acc = acc.concat(actions);
});
@ -217,7 +217,7 @@ module.exports = {
.map(controller => {
const actions = Object.keys(strapi.plugins[plugin].controllers[controller])
.filter(action => _.isFunction(strapi.plugins[plugin].controllers[controller][action]))
.map(action => `${plugin}.${controller}.${action}`);
.map(action => `${plugin}.${controller}.${action.toLowerCase()}`);
acc = acc.concat(actions);
});
@ -242,11 +242,11 @@ module.exports = {
const isCallback = obj.action === 'callback' && obj.controller === 'auth' && obj.type === 'users-permissions' && role.type === 'guest';
const isConnect = obj.action === 'connect' && obj.controller === 'auth' && obj.type === 'users-permissions';
const isRegister = obj.action === 'register' && obj.controller === 'auth' && obj.type === 'users-permissions' && role.type === 'guest';
const isPassword = obj.action === 'forgotPassword' && obj.controller === 'auth' && obj.type === 'users-permissions' && role.type === 'guest';
const isNewPassword = obj.action === 'changePassword' && obj.controller === 'auth' && obj.type === 'users-permissions' && role.type === 'guest';
const isPassword = obj.action === 'forgotpassword' && obj.controller === 'auth' && obj.type === 'users-permissions' && role.type === 'guest';
const isNewPassword = obj.action === 'changepassword' && obj.controller === 'auth' && obj.type === 'users-permissions' && role.type === 'guest';
const isInit = obj.action === 'init' && obj.controller === 'userspermissions';
const isMe = obj.action === 'me' && obj.controller === 'user' && obj.type === 'users-permissions';
const isReload = obj.action === 'autoReload';
const isReload = obj.action === 'autoreload';
const enabled = isCallback || isRegister || role.type === 'root' || isInit || isPassword || isNewPassword || isMe || isReload || isConnect;
return Object.assign(obj, { enabled, policy: '' });
@ -326,7 +326,7 @@ module.exports = {
role: roleID,
type,
controller,
action
action: action.toLowerCase()
}, bodyAction));
}
});