mirror of
https://github.com/aljazceru/btcpayserver.git
synced 2025-12-17 14:04:26 +01:00
Fix bug: When creating API Key for non-admin, some checked permissions were not included (Fix #2107 and Fix #2002)
This commit is contained in:
@@ -437,7 +437,7 @@ namespace BTCPayServer.Controllers
|
||||
|
||||
if (!isAdmin)
|
||||
{
|
||||
foreach (var p in viewModel.PermissionValues.Where(item => Policies.IsServerPolicy(item.Permission)))
|
||||
foreach (var p in viewModel.PermissionValues.Where(item => item.Permission is null || Policies.IsServerPolicy(item.Permission)))
|
||||
{
|
||||
p.Forbidden = true;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user