Skip to content

Commit 00c92a2

Browse files
fly602yixinshark
authored andcommitted
fix: 修复认证漏洞
修复认证漏洞 Log: 修复认证漏洞 pms: BUG-316595
1 parent ef0dc6a commit 00c92a2

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

accounts1/user.go

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -555,6 +555,11 @@ func (u *User) checkAuth(sender dbus.Sender, selfPass bool, actionId string) err
555555
return nil
556556
}
557557

558+
if !isSelf {
559+
// 鉴权非本用户的数据一律需要鉴权管理员
560+
actionId = polkitActionUserAdministration
561+
}
562+
558563
if actionId == "" {
559564
if isSelf {
560565
actionId = polkitActionChangeOwnData

0 commit comments

Comments
 (0)