bugfix, permission api rewrite

2024-03-27 15:15:46 +01:00
parent ee638914a8
commit aa51380055
11 changed files with 365 additions and 182 deletions
--- a/Core/API/Swagger.class.php
+++ b/Core/API/Swagger.class.php
@@ -41,11 +41,6 @@ class Swagger extends Request {
      return false;
    }

-    // special case: hardcoded permission
-    if ($request instanceof \Core\API\Permission\Save && (!$isLoggedIn || !$currentUser->hasGroup(Group::ADMIN))) {
-      return false;
-    }
-
    if (!empty($requiredGroups)) {
      $userGroups = array_keys($currentUser?->getGroups() ?? []);
      return !empty(array_intersect($requiredGroups, $userGroups));