管理员也不能更新别人的节点

This commit is contained in:
qing committed 2026-07-25 14:25:06 +08:00
1 parent 3e9ff99eaa
commit 17c22a8cd3
1 file changed
-1
-1
View File
@@ -403,7 +403,6 @@ def update_note():
data = call_db_service(DB_SERVER_URL, select_payload)
notes = data['data']
if not info['user'] == 'admin':
if not len(notes) == 1 or not notes[0]['owner'] == info['user']:
return jsonify({"error": 'It\'s not your note'}), 403