Skip to content

Commit 0835c56

Browse files
committed
Fix when "adminuser" imprisonate admin when admin is readonly
1 parent b188c69 commit 0835c56

File tree

1 file changed

+6
-1
lines changed
  • install/deb/filemanager/filegator/backend/Services/Auth/Adapters

1 file changed

+6
-1
lines changed

install/deb/filemanager/filegator/backend/Services/Auth/Adapters/HestiaAuth.php

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,9 +32,14 @@ public function init(array $config = [])
3232
if (isset($_SESSION['user'])) {
3333
$v_user = $_SESSION['user'];
3434
}
35-
if (isset($_SESSION['look']) && ($_SESSION['userContext'] === 'admin') && ($_SESSION['POLICY_SYSTEM_PROTECTED_ADMIN'] === 'no')) {
35+
if (isset($_SESSION['look']) && ($_SESSION['userContext'] === 'admin')){
3636
$v_user = $_SESSION['look'];
3737
}
38+
if ( $_SESSION['look'] == 'admin' && $_SESSION['POLICY_SYSTEM_PROTECTED_ADMIN'] == 'yes' ){
39+
// Go away do not login
40+
header('Location: /');
41+
exit;
42+
}
3843
$this->hestia_user = $v_user;
3944
$this->permissions = isset($config['permissions']) ? (array)$config['permissions'] : [];
4045
$this->private_repos = isset($config['private_repos']) ? (bool)$config['private_repos'] : false;

0 commit comments

Comments
 (0)