aljaz/btcpayserver
1
0
Fork 0
mirror of https://github.com/aljazceru/btcpayserver.git synced 2025-12-17 22:14:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Create store could be called with a scoped store's modify apikey (#1696)

Browse Source
This commit is contained in:
Nicolas Dorier
2020-06-27 15:34:03 +09:00
committed by GitHub
parent d0188f42b7
commit dbb2924ccc
7 changed files with 112 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
BTCPayServer/Controllers/GreenField/StoresController.cs
View File

@@ -65,7 +65,7 @@ namespace BTCPayServer.Controllers.GreenField
}
[HttpPost("~/api/v1/stores")]
[Authorize(Policy = Policies.CanModifyStoreSettings, AuthenticationSchemes = AuthenticationSchemes.Greenfield)]
[Authorize(Policy = Policies.CanModifyStoreSettingsUnscoped, AuthenticationSchemes = AuthenticationSchemes.Greenfield)]
public async Task<IActionResult> CreateStore(CreateStoreRequest request)
{
var validationResult = Validate(request);