Skip to content

Commit 0b40e95

Browse files
committed
fix: 修复认证漏洞
修复认证漏洞 Log: 修复认证漏洞 pms: BUG-316595
1 parent 02fd326 commit 0b40e95

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

accounts1/user.go

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -581,6 +581,11 @@ func (u *User) checkAuth(sender dbus.Sender, selfPass bool, actionId string) err
581581
return nil
582582
}
583583

584+
if !isSelf {
585+
// 鉴权非本用户的数据一律需要鉴权管理员
586+
actionId = polkitActionUserAdministration
587+
}
588+
584589
if actionId == "" {
585590
if isSelf {
586591
actionId = polkitActionChangeOwnData

0 commit comments

Comments
 (0)