mirror of
https://github.com/minetest/contentdb.git
synced 2024-09-19 20:38:31 +02:00
Fix users being able to modify other user's email settings
This commit is contained in:
parent
f6f4fe4fc6
commit
5a2ce15f96
@ -159,6 +159,9 @@ def email_notifications(username=None):
|
||||
if not user:
|
||||
abort(404)
|
||||
|
||||
if not user.checkPerm(current_user, Permission.CHANGE_EMAIL):
|
||||
abort(403)
|
||||
|
||||
is_new = False
|
||||
prefs = user.notification_preferences
|
||||
if prefs is None:
|
||||
|
Loading…
Reference in New Issue
Block a user