aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2026-01-26 01:14:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

1580 fix hidden admin scores (#1581)

Browse Source 
* Fix issue where admins could not see user graphs/api data if score visibility was set to hidden
* Closes #1580
This commit is contained in:
Kevin Chung
2020-08-04 13:23:46 -04:00
committed by GitHub
parent 324fdeda4a
commit 5d7e0e39c7
3 changed files with 71 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
CTFd/utils/decorators/visibility.py
View File

@@ -30,10 +30,18 @@ def check_score_visibility(f):
return redirect(url_for("auth.login", next=request.full_path))
elif v == ScoreVisibilityTypes.HIDDEN:
return (
render_template("errors/403.html", error="Scores are currently hidden"),
403,
)
if is_admin():
return f(*args, **kwargs)
else:
if request.content_type == "application/json":
abort(403)
else:
return (
render_template(
"errors/403.html", error="Scores are currently hidden"
),
403,
)
elif v == ScoreVisibilityTypes.ADMINS:
if is_admin():