mirror of
https://github.com/misskey-dev/misskey.git
synced 2026-05-03 20:46:20 +02:00
fix(backend): add missing kind definition for admin endpoints to improve security
This commit is contained in:
@@ -15,6 +15,8 @@ import { DI } from '@/di-symbols.js';
|
||||
export const meta = {
|
||||
tags: ['admin'],
|
||||
|
||||
kind: 'write:admin',
|
||||
|
||||
res: {
|
||||
type: 'object',
|
||||
optional: false, nullable: false,
|
||||
|
||||
@@ -14,6 +14,8 @@ import { UserEntityService } from '@/core/entities/UserEntityService.js';
|
||||
export const meta = {
|
||||
tags: ['admin'],
|
||||
|
||||
kind: 'write:admin',
|
||||
|
||||
requireCredential: true,
|
||||
requireAdmin: true,
|
||||
} as const;
|
||||
|
||||
@@ -13,6 +13,8 @@ import { ApiError } from '@/server/api/error.js';
|
||||
export const meta = {
|
||||
tags: ['admin'],
|
||||
|
||||
kind: 'read:admin',
|
||||
|
||||
requireCredential: true,
|
||||
requireAdmin: true,
|
||||
|
||||
|
||||
Reference in New Issue
Block a user