فهرست منبع

Fix permission checks in WebSocket and user registration logic

Erwin Jacimino 6 ماه پیش
والد
کامیت
f1ee289ed7
2فایلهای تغییر یافته به همراه3 افزوده شده و 3 حذف شده
  1. 1 1
      routes/debug.py
  2. 2 2
      routes/users.py

+ 1 - 1
routes/debug.py

@@ -39,7 +39,7 @@ async def websocket_endpoint(websocket: WebSocket, token: str = Query(...)):
 
     # 2. Verificación de Permisos (Permission >= 2)
     # Asumo que tu modelo User tiene el atributo 'permission'
-    if getattr(user, 'permission', 0) < 2:
+    if getattr(user, 'permissions', 0) < 2:
         await websocket.close(code=status.WS_1008_POLICY_VIOLATION, reason="Permisos insuficientes")
         return
 

+ 2 - 2
routes/users.py

@@ -142,8 +142,8 @@ async def create_user(request: PinUserRequest, q: str):
 async def force_register_user(request: ForceRegisterUserRequest, current_user: User = Depends(get_current_user)):
     """Force register a new user"""
     logger.info(f"Force register attempt for email: {request.email}")
-    if (current_user.permissions or -1) >= 1:
-        return error_response(message=UserResponse.NOT_PERMITTED)
+    if (current_user.permissions or -1) < 2:
+        return error_response(message=UserResponse.NOT_PERMITTED + f" current permissions: {current_user.permissions}")
     
     
     if not request.pin or len(request.pin) != 4: