Harden admin ACL on critical write paths.

Browse Source

Gate translations, RCON, and user mutations on SETTINGS_EDIT, RCON_EXECUTE, and USERS_EDIT instead of dashboard/rank checks; redirect the legacy user-edit URL to the guarded canonical page.

Co-authored-by: Cursor <[email protected]>

...

This commit is contained in:

SimoandCursor committed 2026-07-15 20:07:15 +02:00

1 parent bae543baf6

commit f2427b3483

8 files changed

+127 -284

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/app/api/admin/users/actions/route.ts

+51 -69

File diff suppressed because it is too large. Load diff