Hawkin
/
arangodb
mirror of https://gitee.com/bigwinds/arangodb
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Bug fix 3.3/issue 4222 (#4325)

This commit is contained in:
Heiko 2018-01-16 20:58:13 +01:00 committed by Michael Hackstein
parent 941bd2b3e1
commit f7933aa0f7
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG
View File

@ -21,6 +21,8 @@ v3.3.3 (XXXX-XX-XX)
* UI: optimized login view for very small screen sizes
* issue #4222: Permission error preventing AQL query import / export on webui
* UI: optimized error messages for invalid query bind parameter
* UI: upgraded swagger ui to version 3.9.0

6
arangod/V8Server/v8-users.cpp
View File

@ -189,13 +189,15 @@ static void JS_GetUser(v8::FunctionCallbackInfo<v8::Value> const& args) {
if (args.Length() < 1 || !args[0]->IsString()) {
TRI_V8_THROW_EXCEPTION_USAGE("document(username)");
}
if (!IsAdminUser()) {
std::string username = TRI_ObjectToString(args[0]);
if (!CanAccessUser(username)) {
TRI_V8_THROW_EXCEPTION(TRI_ERROR_FORBIDDEN);
}
auto authentication =
FeatureCacheFeature::instance()->authenticationFeature();
std::string username = TRI_ObjectToString(args[0]);
VPackBuilder result = authentication->authInfo()->serializeUser(username);
if (!result.isEmpty()) {
TRI_V8_RETURN(TRI_VPackToV8(isolate, result.slice()));