瀏覽代碼

fix: missing write:pages perm for edit existing pages (#1228)

NGPixel 5 年之前
父節點
當前提交
49819b41db
共有 2 個文件被更改,包括 2 次插入2 次删除
  1. 1 1
      package.json
  2. 1 1
      server/controllers/common.js

+ 1 - 1
package.json

@@ -1,6 +1,6 @@
 {
   "name": "wiki",
-  "version": "2.0.0-beta",
+  "version": "2.0.0",
   "releaseDate": "2019-01-01T01:01:01.000Z",
   "description": "A modern, lightweight and powerful wiki app built on NodeJS, Git and Markdown",
   "main": "wiki.js",

+ 1 - 1
server/controllers/common.js

@@ -66,7 +66,7 @@ router.get(['/e', '/e/*'], async (req, res, next) => {
   }
 
   if (page) {
-    if (!WIKI.auth.checkAccess(req.user, ['manage:pages'], pageArgs)) {
+    if (!WIKI.auth.checkAccess(req.user, ['write:pages', 'manage:pages'], pageArgs)) {
       _.set(res.locals, 'pageMeta.title', 'Unauthorized')
       return res.render('unauthorized', { action: 'edit' })
     }