usbharu
/
misskey
mirror of https://github.com/misskey-dev/misskey.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

enhance(backend): 管理者/モデレーターはファイルのアップロード制限をバイパスするように 

Resolve #16687
This commit is contained in:
syuilo 2025-10-21 19:24:43 +09:00
parent c4ee95a40a
commit 5b5a1f08e1
2 changed files with 32 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG.md
View File

@ -19,6 +19,7 @@
- Fix: 投票が終了した後に投票結果が正しく表示されない問題を修正 - Fix: 投票が終了した後に投票結果が正しく表示されない問題を修正
### Server ### Server
- Enhance: 管理者/モデレーターはファイルのアップロード制限をバイパスするように
- Enhance: セキュリティの向上 - Enhance: セキュリティの向上
## 2025.10.0 ## 2025.10.0

5
packages/backend/src/core/DriveService.ts
View File

@ -517,8 +517,10 @@ export class DriveService {
this.registerLogger.debug(`ADD DRIVE FILE: user ${user?.id ?? 'not set'}, name ${detectedName}, tmp ${path}`); this.registerLogger.debug(`ADD DRIVE FILE: user ${user?.id ?? 'not set'}, name ${detectedName}, tmp ${path}`);
//#region Check drive usage and mime type //#region Check drive usage and mime type
if (user && !isLink) { if (user != null && !isLink) {
const isLocalUser = this.userEntityService.isLocalUser(user); const isLocalUser = this.userEntityService.isLocalUser(user);
const isModerator = isLocalUser ? await this.roleService.isModerator(user) : false;
if (!isModerator) {
const policies = await this.roleService.getUserPolicies(user.id); const policies = await this.roleService.getUserPolicies(user.id);
const allowedMimeTypes = policies.uploadableFileTypes; const allowedMimeTypes = policies.uploadableFileTypes;
@ -553,6 +555,7 @@ export class DriveService {
await this.expireOldFile(await this.usersRepository.findOneByOrFail({ id: user.id }) as MiRemoteUser, driveCapacity - info.size); await this.expireOldFile(await this.usersRepository.findOneByOrFail({ id: user.id }) as MiRemoteUser, driveCapacity - info.size);
} }
} }
}
//#endregion //#endregion
const fetchFolder = async () => { const fetchFolder = async () => {