Fix permissions handling; do not allow a subuser to assign permissions they do not have

This commit is contained in:
Dane Everitt 2020-03-27 16:57:49 -07:00
parent 39f79a8f3c
commit cb945b1f13
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
8 changed files with 137 additions and 78 deletions

View file

@ -3,9 +3,8 @@
namespace Pterodactyl\Http\Requests\Api\Client\Servers\Subusers;
use Pterodactyl\Models\Permission;
use Pterodactyl\Http\Requests\Api\Client\ClientApiRequest;
class GetSubuserRequest extends ClientApiRequest
class GetSubuserRequest extends SubuserRequest
{
/**
* Confirm that a user is able to view subusers for the specified server.