diff --git a/core/api/admin.coffee b/core/api/admin.coffee new file mode 100644 index 0000000..e69de29 diff --git a/core/api/ticket.coffee b/core/api/ticket.coffee index 3900f50..e24c37d 100644 --- a/core/api/ticket.coffee +++ b/core/api/ticket.coffee @@ -39,8 +39,9 @@ module.exports = unless ticket return res.send 404 - unless mTicket.hasMember ticket, account - return res.send 403 + unless mAccount.inGroup account, 'root' + unless mTicket.hasMember ticket, account + return res.send 403 res.render 'ticket/view', account: account