From bcfe36a37a9d8d4a676b10a051583fc0b07d7c60 Mon Sep 17 00:00:00 2001 From: jysperm Date: Thu, 17 Apr 2014 01:15:22 +0800 Subject: [PATCH] =?UTF-8?q?=E5=85=81=E8=AE=B8=E7=AE=A1=E7=90=86=E5=91=98?= =?UTF-8?q?=E6=9F=A5=E7=9C=8B=E5=85=B6=E4=BB=96=E4=BA=BA=E7=9A=84=E5=B7=A5?= =?UTF-8?q?=E5=8D=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- core/api/admin.coffee | 0 core/api/ticket.coffee | 5 +++-- 2 files changed, 3 insertions(+), 2 deletions(-) create mode 100644 core/api/admin.coffee diff --git a/core/api/admin.coffee b/core/api/admin.coffee new file mode 100644 index 0000000..e69de29 diff --git a/core/api/ticket.coffee b/core/api/ticket.coffee index 3900f50..e24c37d 100644 --- a/core/api/ticket.coffee +++ b/core/api/ticket.coffee @@ -39,8 +39,9 @@ module.exports = unless ticket return res.send 404 - unless mTicket.hasMember ticket, account - return res.send 403 + unless mAccount.inGroup account, 'root' + unless mTicket.hasMember ticket, account + return res.send 403 res.render 'ticket/view', account: account