diff --git a/server/models/shares.js b/server/models/shares.js index 746e9c7e..8ec70f51 100644 --- a/server/models/shares.js +++ b/server/models/shares.js @@ -515,7 +515,9 @@ function checkGlobalPermission(context, requiredOperations) { } function enforceGlobalPermission(context, requiredOperations) { - if (!checkGlobalPermission(context, requiredOperations)) { + const superadmin = ((context.user && context.user.role && config.roles.global[context.user.role]["admin"]) || false); + + if (!superadmin && !checkGlobalPermission(context, requiredOperations)) { throwPermissionDenied(); } }