gsathecat
/
fediseer
mirror of https://github.com/Fediseer/fediseer.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: Check ACL

pull/36/head
db0 2023-09-26 00:10:24 +02:00
parent 9846206191
commit 06d257ecf6
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
CHANGELOG.md
View File

@ -1,5 +1,18 @@
# Changelog # Changelog
# 0.17.1
* Prevent endorsement PMs being sent when visibility is private
* Prevent lemmy switching to mastodon proxy
* Fediseer can now change the PM proxy
# 0.17.0
* Added instance state
* Added has_captcha
* Added approval_required
* Added update.py
# 0.16.2 # 0.16.2
* Added way to retrieve misskey admins * Added way to retrieve misskey admins

2
fediseer/apis/v1/whitelist.py
View File

@ -173,6 +173,8 @@ class WhitelistDomain(Resource):
instance_to_reset = database.find_instance_by_domain(domain) instance_to_reset = database.find_instance_by_domain(domain)
changed = False changed = False
new_key = None new_key = None
if requestor_instance != instance_to_reset and user.username != "fediseer":
raise e.Forbidden("Only an instance admin can modify the instance")
if self.args.sysadmins is not None and instance.sysadmins != self.args.sysadmins: if self.args.sysadmins is not None and instance.sysadmins != self.args.sysadmins:
instance.sysadmins = self.args.sysadmins instance.sysadmins = self.args.sysadmins
changed = True changed = True