mirror/outline
1
0
Fork 0
mirror of https://github.com/outline/outline.git synced 2025-12-30 07:19:52 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix: User cannot update profile when MembersCanDeleteAccount setting is disabled, closes #7729

Browse Source
This commit is contained in:
Tom Moor
2024-10-03 20:25:35 -04:00
parent 8356d44cae
commit 033b05f679
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
server/policies/user.ts
View File

@@ -23,9 +23,16 @@ allow(User, "inviteUser", Team, (actor, team) =>
)
);
allow(User, ["update", "delete", "readDetails"], User, (actor, user) =>
allow(User, ["update", "readDetails"], User, (actor, user) =>
or(
//
isTeamAdmin(actor, user),
actor.id === user?.id
)
);
allow(User, "delete", User, (actor, user) =>
or(
isTeamAdmin(actor, user),
and(
actor.id === user?.id,