fixing a critical rights vulnerability
This commit is contained in:
@@ -28,7 +28,7 @@ async def request_new_domain(callback_query: CallbackQuery, state: FSMContext):
|
||||
)
|
||||
|
||||
|
||||
@router.message(AdminManagementStates.waiting_for_new_domain)
|
||||
@router.message(AdminManagementStates.waiting_for_new_domain, IsAdminFilter())
|
||||
async def process_new_domain(message: Message, state: FSMContext, session: AsyncSession):
|
||||
new_domain = message.text.strip()
|
||||
|
||||
|
||||
@@ -105,7 +105,7 @@ async def edit_notification_interval_setting(
|
||||
await callback.answer()
|
||||
|
||||
|
||||
@router.message(NotificationIntervalEditState.waiting_for_value)
|
||||
@router.message(NotificationIntervalEditState.waiting_for_value, IsAdminFilter())
|
||||
async def notification_interval_value_input(message: Message, state: FSMContext, session: AsyncSession) -> None:
|
||||
text_value = (message.text or "").strip()
|
||||
|
||||
|
||||
Reference in New Issue
Block a user