yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-11-04 03:43:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Return HTTP 403 if user is not allowed to perform an operation

Browse Source
This commit is contained in:
Konstantin Tsabolov 2018-05-10 19:36:15 +02:00
parent 3056a7f18f
commit 9e897bcfda
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/strapi-plugin-users-permissions/config/policies/permissions.js
View File

@ -39,7 +39,7 @@ module.exports = async (ctx, next) => {
}, []);
if (!permission) {
ctx.unauthorized();
ctx.forbidden();
return ctx.request.graphql = ctx.body;
}