mirror of
https://git.mirrors.martin98.com/https://github.com/infiniflow/ragflow.git
synced 2025-08-12 22:48:59 +08:00
Fix: authorization issue (#3530)
### What problem does this PR solve? ### Type of change - [x] Bug Fix (non-breaking change which fixes an issue)
This commit is contained in:
parent
5b44b99cfd
commit
541272eb99
@ -83,7 +83,7 @@ def create(tenant_id):
|
|||||||
@manager.route('/<tenant_id>/user/<user_id>', methods=['DELETE'])
|
@manager.route('/<tenant_id>/user/<user_id>', methods=['DELETE'])
|
||||||
@login_required
|
@login_required
|
||||||
def rm(tenant_id, user_id):
|
def rm(tenant_id, user_id):
|
||||||
if current_user.id != tenant_id:
|
if current_user.id != tenant_id and current_user.id != user_id:
|
||||||
return get_json_result(
|
return get_json_result(
|
||||||
data=False,
|
data=False,
|
||||||
message='No authorization.',
|
message='No authorization.',
|
||||||
|
Loading…
x
Reference in New Issue
Block a user