Implements bitmap-based limited privileges for non-admins

Implements #4489
This commit is contained in:
Simone Mainardi 2020-10-09 15:50:22 +02:00
parent a64095f244
commit 049bfdcf4a
26 changed files with 180 additions and 36 deletions

View file

@ -10,6 +10,17 @@ require "lua_utils"
local json = require("dkjson")
local user_scripts = require("user_scripts")
local http_lint = require("http_lint")
local rest_utils = require "rest_utils"
local auth = require "auth"
-- ################################################
if not auth.has_capability(auth.capabilities.user_scripts) then
rest_utils.answer(rest_utils.consts.err.not_granted)
return
end
-- ################################################
local action = _POST["action"]
@ -20,11 +31,6 @@ if(action == nil) then
return
end
if(not isAdministrator()) then
traceError(TRACE_ERROR, TRACE_CONSOLE, "Admin privileges required")
return
end
-- ################################################
local result = {}