From 1bcfcaebe052c9ba347931410285278eac6bb4ae Mon Sep 17 00:00:00 2001 From: zijiren233 Date: Sun, 12 Nov 2023 23:44:41 +0800 Subject: [PATCH] Fix: root can ban root --- server/handlers/admin.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/server/handlers/admin.go b/server/handlers/admin.go index 0cf1f3d4..3c8b7330 100644 --- a/server/handlers/admin.go +++ b/server/handlers/admin.go @@ -239,6 +239,11 @@ func BanUser(ctx *gin.Context) { return } + if u.IsRoot() { + ctx.AbortWithStatusJSON(http.StatusBadRequest, model.NewApiErrorStringResp("cannot ban root")) + return + } + if u.IsAdmin() && !user.IsRoot() { ctx.AbortWithStatusJSON(http.StatusBadRequest, model.NewApiErrorStringResp("cannot ban admin")) return