From c4a6f076724468d68f2c7d06b884951bcbaa0b5b Mon Sep 17 00:00:00 2001
From: Yang Luo <hsluoyz@qq.com>
Date: Fri, 24 Nov 2023 01:04:23 +0800
Subject: [PATCH] Allow app user in demo mode

---
 authz/authz.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/authz/authz.go b/authz/authz.go
index 8086e56d..2f3e72c1 100644
--- a/authz/authz.go
+++ b/authz/authz.go
@@ -151,7 +151,7 @@ func isAllowedInDemoMode(subOwner string, subName string, method string, urlPath
 			return true
 		} else if urlPath == "/api/update-user" {
 			// Allow ordinary users to update their own information
-			if subOwner == objOwner && subName == objName && !(subOwner == "built-in" && subName == "admin") {
+			if (subOwner == objOwner && subName == objName || subOwner == "app") && !(subOwner == "built-in" && subName == "admin") {
 				return true
 			}
 			return false