管理员也不能更新别人的节点
This commit is contained in:
1 parent
3e9ff99eaa
commit
17c22a8cd3
1 file changed
-1
@@ -403,7 +403,6 @@ def update_note():
|
||||
|
||||
data = call_db_service(DB_SERVER_URL, select_payload)
|
||||
notes = data['data']
|
||||
if not info['user'] == 'admin':
|
||||
if not len(notes) == 1 or not notes[0]['owner'] == info['user']:
|
||||
return jsonify({"error": 'It\'s not your note'}), 403
|
||||
|
||||
|
||||
Reference in new issue
Block a user