fix: add previlige check for passwd

2023-12-14 06:51:28 +00:00
parent 159cacaa21
commit e6d5aeb8f6
1 changed files with 4 additions and 1 deletions
--- a/backend/src/engine.cpp
+++ b/backend/src/engine.cpp
@ -169,7 +169,10 @@ std::vector<std::string> BookStoreEngineClass::ExecutePasswd(
  if (!CommandPasswdLexer(cmd, user_id, current_password, new_password))
    return std::vector<std::string>({"Invalid"});
  // debugPrint("sucessfully lexed passwd");
-  if (user_data_base.GetPrevilege(user_id) < 1)
+  if (user_data_base.GetPrevilege(user_id) == -1)
+    return std::vector<std::string>({"Invalid"});
+  if (login_stack.empty() ||
+      user_data_base.GetPrevilege(login_stack.top().first) < 1)
    return std::vector<std::string>({"Invalid"});
  // debugPrint("begin checing authority");
  if (login_stack.size() > 0 &&