From a17d810fea53dec734cf46ce9d7ecdb51e276997 Mon Sep 17 00:00:00 2001 From: Johannes Zellner Date: Mon, 24 Feb 2020 15:10:21 +0100 Subject: [PATCH] Only auto-login the owner for subscription setup --- src/js/client.js | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/src/js/client.js b/src/js/client.js index 5be914535..e79b32dc6 100644 --- a/src/js/client.js +++ b/src/js/client.js @@ -2236,12 +2236,13 @@ angular.module('Application').service('Client', ['$http', '$interval', '$timeout Client.prototype.openSubscriptionSetup = function (subscription) { var that = this; - this.getAppstoreUserToken(function (error, result) { - if (error) return console.error('Unable to get appstore user token.', error); + var email = subscription.emailEncoded; + var cloudronId = subscription.cloudronId; - var token = result; - var email = subscription.emailEncoded; - var cloudronId = subscription.cloudronId; + if (!this._userInfo.isAtLeastOwner) return window.location.href = that.getConfig().webServerOrigin + '/console.html#/userprofile?view=subscriptions&email=' + email + '&cloudronId=' + cloudronId; + + this.getAppstoreUserToken(function (error, token) { + if (error) console.error('Unable to get appstore user token.', error); window.location.href = that.getConfig().webServerOrigin + '/console.html#/userprofile?view=subscriptions&email=' + email + '&cloudronId=' + cloudronId + '&token=' + token; });