From c3b38409947a366c2f95d371bdae4cebe704d308 Mon Sep 17 00:00:00 2001
From: ZhiKai <42113384+PIPIKAI@users.noreply.github.com>
Date: Sat, 16 Sep 2023 21:06:20 +0800
Subject: [PATCH] fix: fix update score permission check (#2335)

* fix: Fixed the missing permission check when updating the score field.
* Update object/user_util.go
---
 object/user_util.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/object/user_util.go b/object/user_util.go
index 44185c7c..ebdf2037 100644
--- a/object/user_util.go
+++ b/object/user_util.go
@@ -320,6 +320,11 @@ func CheckPermissionForUpdateUser(oldUser, newUser *User, isAdmin bool, lang str
 		itemsChanged = append(itemsChanged, item)
 	}
 
+	if oldUser.Score != newUser.Score {
+		item := GetAccountItemByName("Score", organization)
+		itemsChanged = append(itemsChanged, item)
+	}
+
 	for i := range itemsChanged {
 		if pass, err := CheckAccountItemModifyRule(itemsChanged[i], isAdmin, lang); !pass {
 			return pass, err