From e30830413e3ef5e60647da6e69a6b978d9fb335d Mon Sep 17 00:00:00 2001
From: Jean-Laurent <jean-laurent.duzant@xelians.fr>
Date: Tue, 15 Nov 2022 17:05:10 +0100
Subject: [PATCH] FIX #22577 TIME 0:10 add missing condition in
UserController::hasRightByUserId()
---
src/app/user/controllers/UserController.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/app/user/controllers/UserController.php b/src/app/user/controllers/UserController.php
index 368b5419e1..667576c183 100755
--- a/src/app/user/controllers/UserController.php
+++ b/src/app/user/controllers/UserController.php
@@ -933,7 +933,7 @@ class UserController
ValidatorModel::intVal($args, ['activeUserId', 'targetUserId', 'targetGroupId']);
$activeUserManageableGroups = array_column(UserController::getManageableGroups(['userId' => $args['activeUserId']]), 'id');
- if (empty($activeUserManageableGroups)) {
+ if ($args['activeUserId'] != $args['targetUserId'] && empty($activeUserManageableGroups)) {
return false;
}
--
GitLab