scottk/wlan-cloud-ucentralsec
1
0
Fork 0
mirror of https://github.com/Telecominfraproject/wlan-cloud-ucentralsec.git synced 2025-11-01 11:17:51 +00:00
Code Issues Packages Projects Releases 10 Wiki Activity

Adding additional security for SMS: only root, partner, admin are allowed to send SMS.

Browse Source
This commit is contained in:
stephb9959
2022-01-10 07:11:13 -08:00
parent d38e4ca2fc
commit cf903a57ab
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/RESTAPI/RESTAPI_sms_handler.cpp
View File

@@ -33,6 +33,12 @@ namespace OpenWifi {
return BadRequest("Code and number could not be validated"); return BadRequest("Code and number could not be validated");
} }
if( UserInfo_.userinfo.userRole!=SecurityObjects::ROOT &&
UserInfo_.userinfo.userRole!=SecurityObjects::PARTNER &&
UserInfo_.userinfo.userRole!=SecurityObjects::ADMIN) {
return UnAuthorized(RESTAPI::Errors::InsufficientAccessRights,ACCESS_DENIED);
}
if (Obj->has("to") && if (Obj->has("to") &&
Obj->has("text")) { Obj->has("text")) {