fix(backend): add missing kind definition for admin endpoints to improve security

2023-12-18 12:32:26 +09:00 · 2023-12-18 12:32:26 +09:00 · 5150053275
commit 5150053275
parent 776eea736a
77 changed files with 153 additions and 2 deletions
--- a/packages/backend/src/server/api/endpoints/admin/roles/users.ts
+++ b/packages/backend/src/server/api/endpoints/admin/roles/users.ts
@ -16,6 +16,8 @@ import { ApiError } from '../../../error.js';
 export const meta = {
 	tags: ['admin', 'role', 'users'],

+	kind: 'read:admin',
+
 	requireCredential: false,
 	requireAdmin: true,