zgzgorg / iam-backend

0 stars 2 forks source link

change approved account only allow admin to do it #69

Open kis87988 opened 2 years ago

kis87988 commented 2 years ago

This may be a bug need to fix, the current code everyone can approve a newly registered account. Fix it to only allow core admins can approve newly registered accounts.

tslmy commented 2 years ago

How is it specified that a user is an admin? (By membership in a Google group?)