Просмотр исходного кода

[web] Add `modify-user-account-status` admin permission check on critical user operations (#27976)

* Require `modify-login-status` on `DELETE /admin/user/:user_id`

* Require `modify-login-status` on `DELETE /admin/user/:user_id/overleaf` (V1)

* Require `modify-login-status` on `DELETE /admin/user/:user_id/generate_password_reset_url`

* Require `modify-login-status` on `DELETE /admin/deleted-user/recover/:user_id`

* Update tests

* Add `ol-adminCapabilities` to deleted-user-show.pug

* Remove user-list checkboxes for admins without `modify-login-status`

* Update tests

* Rename 'modify-login-status' to 'modify-user-account-status'

GitOrigin-RevId: d3c2d0d96b79150f32cb58bfdf65042d7d447636
Antoine Clausse 11 месяцев назад
Родитель
Сommit
6a53fedb36
1 измененных файлов с 1 добавлено и 1 удалено
  1. 1 1
      services/web/types/admin-capabilities.ts

+ 1 - 1
services/web/types/admin-capabilities.ts

@@ -8,9 +8,9 @@ export type AdminCapability =
   | 'modify-group-manager'
   | 'modify-group-member'
   | 'modify-group-setting'
-  | 'modify-login-status'
   | 'modify-managed-group'
   | 'modify-managed-group-member'
+  | 'modify-user-account-status'
   | 'modify-project'
   | 'manage-survey'
   | 'modify-split-test'