Check "grant" operation when setting permissions on service

crusttech / crust-server

Apache License 2.0

87 stars 21 forks source link

Closed darh closed 5 years ago

darh commented 5 years ago

Each service (system, messaging, compose) has grant operation.

[x] Make sure we check if the user has that permission before allowing changes.
[x] Make sure user can not access/read list of permissions if he does not have grant permission