From 8b659b3d00fe08b637fedc790882ae040fae9a4f Mon Sep 17 00:00:00 2001 From: Abhishek K <32607604+abhishek9686@users.noreply.github.com> Date: Thu, 30 Nov 2023 22:37:00 +0400 Subject: [PATCH] only let normal to be created on PRO (#2716) --- controllers/user.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/controllers/user.go b/controllers/user.go index 38447346..64dd187a 100644 --- a/controllers/user.go +++ b/controllers/user.go @@ -350,6 +350,10 @@ func createUser(w http.ResponseWriter, r *http.Request) { logic.ReturnErrorResponse(w, r, logic.FormatError(err, "forbidden")) return } + if !servercfg.IsPro && !user.IsAdmin { + logic.ReturnErrorResponse(w, r, logic.FormatError(err, "forbidden")) + return + } err = logic.CreateUser(&user) if err != nil {