From 56e80f7c0cd09c48a5e0e89ba7aa748236c1cc49 Mon Sep 17 00:00:00 2001 From: shortcutme Date: Sun, 28 Jan 2018 16:41:42 +0100 Subject: [PATCH] Add per-cmd site permission query --- src/Ui/UiWebsocket.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Ui/UiWebsocket.py b/src/Ui/UiWebsocket.py index a26c28fc..7abd8831 100644 --- a/src/Ui/UiWebsocket.py +++ b/src/Ui/UiWebsocket.py @@ -159,7 +159,7 @@ class UiWebsocket(object): return True # Has permission to access a site - def hasSitePermission(self, address): + def hasSitePermission(self, address, cmd=None): if address != self.site.address and "ADMIN" not in self.site.settings["permissions"]: return False else: @@ -323,7 +323,7 @@ class UiWebsocket(object): # - Actions - def actionAs(self, to, address, cmd, params=[]): - if not self.hasSitePermission(address): + if not self.hasSitePermission(address, cmd=cmd): return self.response(to, "No permission for site %s" % address) req_self = copy.copy(self) req_self.site = self.server.sites.get(address)