external/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2025-03-09 15:40:18 +00:00
Code Issues Releases Wiki Activity

Blocked user group creation when domain is in LDAP mode.

Browse source
This commit is contained in:
Ylian Saint-Hilaire 2023-09-24 12:00:33 -07:00
parent 94812f53b2
commit 604d50585b
2 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
meshuser.js
View file

@ -1490,6 +1490,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
{
var ugrpdomain, err = null;
try {
// Check if we are in a mode that does not allow manual user group creation
if (domain.auth == 'ldap') { err = "Not allowed in LDAP mode"; }
// Check if we have new group restriction
if ((user.siteadmin & SITERIGHT_USERGROUPS) == 0) { err = "Permission denied"; }