admin/accounts/createで一般ユーザーがアカウントを作成し放題なのを修正 (#6205)

2020-03-30 09:27:39 +09:00 · 2020-03-30 09:27:39 +09:00 · 4c6d0386b9
parent a448172952
commit 4c6d0386b9
1 changed files with 1 additions and 1 deletions
--- a/src/server/api/endpoints/admin/accounts/create.ts
+++ b/src/server/api/endpoints/admin/accounts/create.ts
@ -18,7 +18,7 @@ export const meta = {

 export default define(meta, async (ps, me) => {
 	const noUsers = (await Users.count({})) === 0;
-	if (!noUsers && me == null) throw new Error('access denied');
+	if (!noUsers && !me?.isAdmin) throw new Error('access denied');

 	const { account, secret } = await signup(ps.username, ps.password);