carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

do this https://rdrama.net/h/changelog/post/165657/changelog-megathread-marseynotes/7337394#context

master
Aevann 2024-11-15 17:24:52 +02:00
parent 1bb1f60dda
commit 06dde947f2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/routes/wrappers.py
View File

@ -156,7 +156,7 @@ def auth_required(f):
v = get_logged_in_user()
if not v:
stop(401, "You need to login to perform this action!")
if v.is_permabanned and request.method == "POST" and request.path not in {'/contact','/reply','/logout'} and not request.path.startswith('/delete/'):
if v.is_permabanned and request.method == "POST" and request.path not in {'/contact','/reply','/logout','/settings/delete_account'} and not request.path.startswith('/delete/'):
stop(403, "You can't perform this action while permabanned!")
if request.path.startswith('/@deleted~') and v.admin_level < PERMS['VIEW_DELETED_ACCOUNTS']: