xuans/Smail
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

审查检查点：修正管理员密码重置回归流程
Some checks are pending
Security Checks / security (push) Waiting to run
Details

Browse Source 
按生产规则先验证管理员管理普通用户，再覆盖管理员临时密码重置场景，保留现有授权约束。
This commit is contained in:
smail 2026-09-30 04:49:55 +08:00
parent d1d4f9945b
commit d3142c5541
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
backend/controllers/password_reset_permissions_test.go
View File

@ -58,11 +58,6 @@ func TestEditUserPasswordResetRoleMatrix(t *testing.T) {
adminContext := &appcontext.Context{UserID: admin.ID, SessionVersion: admin.SessionVersion, SecurityVersion: admin.SecurityVersion, UserAccount: admin.Account, Role: access.RoleAdmin, RecentAuth: true, RecoveryCodeConfigured: true, Lang: "zhCn"} adminContext := &appcontext.Context{UserID: admin.ID, SessionVersion: admin.SessionVersion, SecurityVersion: admin.SecurityVersion, UserAccount: admin.Account, Role: access.RoleAdmin, RecentAuth: true, RecoveryCodeConfigured: true, Lang: "zhCn"}
userContext := &appcontext.Context{UserID: user.ID, SessionVersion: user.SessionVersion, SecurityVersion: user.SecurityVersion, UserAccount: user.Account, Role: access.RoleUser, RecentAuth: true, RecoveryCodeConfigured: true, Lang: "zhCn"} userContext := &appcontext.Context{UserID: user.ID, SessionVersion: user.SessionVersion, SecurityVersion: user.SecurityVersion, UserAccount: user.Account, Role: access.RoleUser, RecentAuth: true, RecoveryCodeConfigured: true, Lang: "zhCn"}
if result := editUserRequest(t, superContext, `{"id":`+itoa(admin.ID)+`,"password":"ResetAdm12","disabled":0}`); result != 0 {
t.Fatalf("super administrator could not reset administrator: %d", result)
}
assertUserPassword(t, admin.ID, "ResetAdm12")
if _, err := db.Instance.ID(admin.ID).Get(&admin); err != nil { if _, err := db.Instance.ID(admin.ID).Get(&admin); err != nil {
t.Fatal(err) t.Fatal(err)
} }
@ -74,6 +69,11 @@ func TestEditUserPasswordResetRoleMatrix(t *testing.T) {
} }
assertUserPassword(t, user.ID, "ResetUser123") assertUserPassword(t, user.ID, "ResetUser123")
if result := editUserRequest(t, superContext, `{"id":`+itoa(admin.ID)+`,"password":"ResetAdm12","disabled":0}`); result != 0 {
t.Fatalf("super administrator could not reset administrator: %d", result)
}
assertUserPassword(t, admin.ID, "ResetAdm12")
if result := editUserRequest(t, adminContext, `{"id":`+itoa(superAdmin.ID)+`,"password":"DeniedPass123","disabled":0}`); result == 0 { if result := editUserRequest(t, adminContext, `{"id":`+itoa(superAdmin.ID)+`,"password":"DeniedPass123","disabled":0}`); result == 0 {
t.Fatal("administrator reset of super administrator was accepted") t.Fatal("administrator reset of super administrator was accepted")
} }