Leisuretimedock/blessing-skin-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix operating players of an admin himself on admin page

Browse Source
This commit is contained in:
printempw 2017-07-30 14:42:26 +08:00
parent 9f5c84aba9
commit d15217ddcb
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/AdminController.php
View File

@ -319,7 +319,9 @@ class AdminController extends Controller
abort(404, trans('general.unexistent-player'));
}
if ($player->user->permission >= app('user.current')->permission) {
if ($player->user->permission >= app('user.current')->permission &&
$player->user()->first()->uid !== app('user.current')->uid)
{
return json(trans('admin.players.no-permission'), 1);
}