Blocked user group creation when domain is in LDAP mode.
Ylian Saint-Hilaire committed
Sep 24, 2023 at 12:00 UTC
604d50585bbe4e096708c93de65167e1fdd06b98
2 files changed
+10
-1
meshuser.js
+3
@@ -1490,6 +1490,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
1490
{
1491
var ugrpdomain, err = null;
1492
try {
1493
+ // Check if we are in a mode that does not allow manual user group creation
1494
+ if (domain.auth == 'ldap') { err = "Not allowed in LDAP mode"; }
1495
+
1496
// Check if we have new group restriction
1497
if ((user.siteadmin & SITERIGHT_USERGROUPS) == 0) { err = "Permission denied"; }
1498
package.json
+7
-1
@@ -37,6 +37,7 @@
37
"sample-config-advanced.json"
38
],
39
"dependencies": {
40
+ "@yetzt/nedb": "1.8.0",
41
"archiver": "5.3.2",
42
"body-parser": "1.20.2",
43
"cbor": "5.2.0",
@@ -46,10 +47,15 @@
47
"express-handlebars": "5.3.5",
48
"express-ws": "5.0.2",
49
"ipcheck": "0.1.0",
50
+ "ldapauth-fork": "5.0.5",
51
+ "loadavg-windows": "1.1.1",
52
"minimist": "1.2.8",
53
"multiparty": "4.2.3",
51
- "@yetzt/nedb": "1.8.0",
54
"node-forge": "1.3.1",
55
+ "node-pushover": "1.0.0",
56
+ "node-windows": "0.1.14",
57
+ "otplib": "10.2.3",
58
+ "ssh2": "1.14.0",
59
"ua-parser-js": "1.0.36",
60
"ws": "8.14.2",
61
"yauzl": "2.10.0"