mirrors/pocket-id
1
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-02-16 05:31:12 +00:00
Code Activity

fix: users can't be updated by admin if self account editing is disabled

Browse Source
This commit is contained in:
Elias Schneider
2025-06-27 17:14:53 +02:00
parent 6db57d9f27
commit 29cb5513a0
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
backend/internal/service/user_service.go
View File

@@ -297,7 +297,7 @@ func (s *UserService) updateUserInternal(ctx context.Context, userID string, upd
allowOwnAccountEdit := s.appConfigService.GetDbConfig().AllowOwnAccountEdit.IsTrue() allowOwnAccountEdit := s.appConfigService.GetDbConfig().AllowOwnAccountEdit.IsTrue()
// For LDAP users or if own account editing is not allowed, only allow updating the locale unless it's an LDAP sync // For LDAP users or if own account editing is not allowed, only allow updating the locale unless it's an LDAP sync
if !isLdapSync && (isLdapUser || (!allowOwnAccountEdit && !updateOwnUser)) { if !isLdapSync && (isLdapUser || (!allowOwnAccountEdit && updateOwnUser)) {
user.Locale = updatedUser.Locale user.Locale = updatedUser.Locale
} else { } else {
user.FirstName = updatedUser.FirstName user.FirstName = updatedUser.FirstName