external/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2025-02-15 04:21:51 +00:00
Code Issues Releases Wiki Activity

Blocked user group creation when domain is in LDAP mode.

Browse source
This commit is contained in:
Ylian Saint-Hilaire 2023-09-24 12:00:33 -07:00
parent 94812f53b2
commit 604d50585b
2 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
meshuser.js
View file

@ -1490,6 +1490,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
{ {
var ugrpdomain, err = null; var ugrpdomain, err = null;
try { try {
// Check if we are in a mode that does not allow manual user group creation
if (domain.auth == 'ldap') { err = "Not allowed in LDAP mode"; }
// Check if we have new group restriction // Check if we have new group restriction
if ((user.siteadmin & SITERIGHT_USERGROUPS) == 0) { err = "Permission denied"; } if ((user.siteadmin & SITERIGHT_USERGROUPS) == 0) { err = "Permission denied"; }

8
package.json
View file

@ -37,6 +37,7 @@
"sample-config-advanced.json" "sample-config-advanced.json"
], ],
"dependencies": { "dependencies": {
"@yetzt/nedb": "1.8.0",
"archiver": "5.3.2", "archiver": "5.3.2",
"body-parser": "1.20.2", "body-parser": "1.20.2",
"cbor": "5.2.0", "cbor": "5.2.0",
@ -46,10 +47,15 @@
"express-handlebars": "5.3.5", "express-handlebars": "5.3.5",
"express-ws": "5.0.2", "express-ws": "5.0.2",
"ipcheck": "0.1.0", "ipcheck": "0.1.0",
"ldapauth-fork": "5.0.5",
"loadavg-windows": "1.1.1",
"minimist": "1.2.8", "minimist": "1.2.8",
"multiparty": "4.2.3", "multiparty": "4.2.3",
"@yetzt/nedb": "1.8.0",
"node-forge": "1.3.1", "node-forge": "1.3.1",
"node-pushover": "1.0.0",
"node-windows": "0.1.14",
"otplib": "10.2.3",
"ssh2": "1.14.0",
"ua-parser-js": "1.0.36", "ua-parser-js": "1.0.36",
"ws": "8.14.2", "ws": "8.14.2",
"yauzl": "2.10.0" "yauzl": "2.10.0"