llvy.ltd/casdoor
1
0
Fork 0
mirror of https://github.com/casdoor/casdoor.git synced 2025-05-23 02:35:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

Deleted user cannot perform actions

Browse Source
This commit is contained in:
Yang Luo 2023-10-26 10:41:38 +08:00
parent 93efaa5459
commit f6a7888f83
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
authz/authz.go
View File

@ -127,9 +127,15 @@ func IsAllowed(subOwner string, subName string, method string, urlPath string, o
return true return true
} }
if user != nil && user.IsAdmin && (subOwner == objOwner || (objOwner == "admin")) { if user != nil {
if user.IsDeleted {
return false
}
if user.IsAdmin && (subOwner == objOwner || (objOwner == "admin")) {
return true return true
} }
}
res, err := Enforcer.Enforce(subOwner, subName, method, urlPath, objOwner, objName) res, err := Enforcer.Enforce(subOwner, subName, method, urlPath, objOwner, objName)
if err != nil { if err != nil {