From 27874027a927a1e44c71a44be5fb59ee9fdf290d Mon Sep 17 00:00:00 2001
From: joker-x <ivan@sinanimodelucro.org>
Date: Sun, 30 Aug 2020 06:29:42 +0200
Subject: [PATCH] Allow superadmin access to all entities without global
 permissions

---
 server/models/shares.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/server/models/shares.js b/server/models/shares.js
index 746e9c7e..8ec70f51 100644
--- a/server/models/shares.js
+++ b/server/models/shares.js
@@ -515,7 +515,9 @@ function checkGlobalPermission(context, requiredOperations) {
 }
 
 function enforceGlobalPermission(context, requiredOperations) {
-    if (!checkGlobalPermission(context, requiredOperations)) {
+    const superadmin = ((context.user && context.user.role && config.roles.global[context.user.role]["admin"]) || false);
+
+    if (!superadmin && !checkGlobalPermission(context, requiredOperations)) {
         throwPermissionDenied();
     }
 }