security fix: CP-22: Websites – Modify Website

2026-02-13 18:16:48 +01:00 · 2021-08-20 15:40:23 +05:00
parent bf42a54be0
commit 9a47edc9ec
1 changed files with 6 additions and 0 deletions
--- a/websiteFunctions/website.py
+++ b/websiteFunctions/website.py
@@ -766,6 +766,12 @@ class WebsiteManager:
            else:
                return ACLManager.loadErrorJson('websiteDeleteStatus', 0)

+            newOwner = Administrator.objects.get(userName=newUser)
+            if ACLManager.checkUserOwnerShip(currentACL, admin, newOwner) == 1:
+                pass
+            else:
+                return ACLManager.loadErrorJson('websiteDeleteStatus', 0)
+
            confPath = virtualHostUtilities.Server_root + "/conf/vhosts/" + domain
            completePathToConfigFile = confPath + "/vhost.conf"