joe/kami-parse-server
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Require masterKey when performing config updates

Browse Source
This commit is contained in:
Peter Theill
2016-02-07 13:51:32 +01:00
parent 6fe050b397
commit 3b0ab80965
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
global_config.js
View File

@@ -8,6 +8,10 @@ var router = new PromiseRouter();
// Returns a promise for a {response} object. // Returns a promise for a {response} object.
function handleUpdateGlobalConfig(req) { function handleUpdateGlobalConfig(req) {
if (!req.auth.isMaster) {
throw new Parse.Error(Parse.Error.OPERATION_FORBIDDEN, 'Config updates requires valid masterKey.');
}
return rest.update(req.config, req.auth, return rest.update(req.config, req.auth,
'_GlobalConfig', 1, req.body) '_GlobalConfig', 1, req.body)
.then((response) => { .then((response) => {