fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-02 01:52:10 +09:00
Code Issues Projects Releases Packages Wiki Activity

Allow login-as for admin members, protect only super admin (member_srl=4)

Browse source 
Changed the restriction so admins can login as other admin accounts,
but member_srl 4 (super admin) is protected from impersonation.

Co-authored-by: Lastorder-DC <18280396+Lastorder-DC@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot] 2026-03-02 04:11:36 +00:00
parent d6486a0415
commit 4b32a2fc37
2 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/member/member.admin.controller.php
View file

@ -1829,13 +1829,14 @@ class MemberAdminController extends Member
throw new Rhymix\Framework\Exceptions\InvalidRequest; throw new Rhymix\Framework\Exceptions\InvalidRequest;
} }
// Do not allow login as another admin // Do not allow login as the super admin (member_srl = 4)
if($member_info->is_admin === 'Y') if(intval($member_info->member_srl) === 4)
{ {
throw new Rhymix\Framework\Exceptions\NotPermitted; throw new Rhymix\Framework\Exceptions\NotPermitted;
} }
// Perform login as the target member // Perform login as the target member
// Session::login() sets the basic session variables, and setSessionInfo() populates Context with member details
Rhymix\Framework\Session::login($member_info->member_srl); Rhymix\Framework\Session::login($member_info->member_srl);
$oMemberController = getController('member'); $oMemberController = getController('member');
$oMemberController->setSessionInfo(); $oMemberController->setSessionInfo();

2
modules/member/tpl/member_list.html
View file

@ -99,7 +99,7 @@
<td class="rx_detail_marks">{$member_info['group_list']}&nbsp;</td> <td class="rx_detail_marks">{$member_info['group_list']}&nbsp;</td>
<td class="nowr"> <td class="nowr">
<a href="{getUrl('', 'module', 'admin', 'act', 'dispMemberAdminInsert', 'member_srl', $member_info['member_srl'])}">{$lang->inquiry}/{$lang->cmd_modify}</a> <a href="{getUrl('', 'module', 'admin', 'act', 'dispMemberAdminInsert', 'member_srl', $member_info['member_srl'])}">{$lang->inquiry}/{$lang->cmd_modify}</a>
<!--@if($member_info['is_admin'] != 'Y')--> <!--@if($member_info['member_srl'] != 4)-->
<a href="#" class="_login_as" data-member-srl="{$member_info['member_srl']}">{$lang->cmd_login_as}</a> <a href="#" class="_login_as" data-member-srl="{$member_info['member_srl']}">{$lang->cmd_login_as}</a>
<!--@end--> <!--@end-->
</td> </td>