Hawkin
/
arangodb
mirror of https://gitee.com/bigwinds/arangodb
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Fixed wrong permissions for rebalanceShards. (#10374)

This commit is contained in:
Lars Maier 2019-11-12 10:23:23 +01:00 committed by KVS85
parent 4ebe84f512
commit 821509ef0f
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
js/actions/api-cluster.js
View File

@ -1365,9 +1365,10 @@ actions.defineHttp({
}
// simon: RO is sufficient to rebalance shards for current db
if (req.database !== '_system'/* || !req.isAdminUser*/) {
if (!req.isAdminUser &&
users.permission(req.user, req.database) !== 'rw') {
actions.resultError(req, res, actions.HTTP_FORBIDDEN, 0,
'only allowed for admins on the _system database');
'only allowed for admins on the database');
return;
}