jjkiers/cloudron-box
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

disallow certain actions in demo mode

Browse Source 
* Cannot change password
* Cannot delete user
* Cannot migrate domain or change plan

Fixes #20
This commit is contained in:
Girish Ramakrishnan
2016-08-31 21:20:48 -07:00
parent 997152ad14
commit 61ef3f3efb
3 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/user.js
View File

@@ -26,6 +26,7 @@ exports = module.exports = {
var assert = require('assert'),
clients = require('./clients.js'),
crypto = require('crypto'),
config = require('./config.js'),
constants = require('./constants.js'),
debug = require('debug')('box:user'),
DatabaseError = require('./databaseerror.js'),
@@ -261,6 +262,8 @@ function removeUser(userId, auditSource, callback) {
assert.strictEqual(typeof auditSource, 'object');
assert.strictEqual(typeof callback, 'function');
if (config.isDemo() && userId === constants.DEMO_USER_ID) return callback(new UserError(UserError.BAD_FIELD, 'Not allowed in demo mode'));
getUser(userId, function (error, user) {
if (error) return callback(error);
@@ -346,6 +349,8 @@ function updateUser(userId, data, auditSource, callback) {
if (_.isEmpty(data)) return callback();
if (config.isDemo() && userId === constants.DEMO_USER_ID) return callback(new UserError(UserError.BAD_FIELD, 'Not allowed in demo mode'));
if (data.username) {
data.username = data.username.toLowerCase();
error = validateUsername(data.username);
@@ -442,6 +447,8 @@ function setPassword(userId, newPassword, callback) {
var error = validatePassword(newPassword);
if (error) return callback(new UserError(UserError.BAD_FIELD, error.message));
if (config.isDemo() && userId === constants.DEMO_USER_ID) return callback(new UserError(UserError.BAD_FIELD, 'Not allowed in demo mode'));
userdb.get(userId, function (error, user) {
if (error && error.reason === DatabaseError.NOT_FOUND) return callback(new UserError(UserError.NOT_FOUND));
if (error) return callback(new UserError(UserError.INTERNAL_ERROR, error));