mirror of
https://github.com/jellyfin/jellyfin.git
synced 2025-12-16 14:03:03 +03:00
fix: require current password when admin changes their own password (#9238)
Fixes https://github.com/jellyfin/jellyfin/issues/9208
This commit is contained in:
@@ -277,7 +277,7 @@ namespace Jellyfin.Api.Controllers
|
||||
}
|
||||
else
|
||||
{
|
||||
if (!User.IsInRole(UserRoles.Administrator))
|
||||
if (!User.IsInRole(UserRoles.Administrator) || User.GetUserId().Equals(userId))
|
||||
{
|
||||
var success = await _userManager.AuthenticateUser(
|
||||
user.Username,
|
||||
|
||||
Reference in New Issue
Block a user