fix(backend): add missing kind definition for admin endpoints to improve security

2023-12-18 12:32:26 +09:00 · 2023-12-18 12:32:26 +09:00 · 5150053275
commit 5150053275
parent 776eea736a
77 changed files with 153 additions and 2 deletions
--- a/packages/backend/src/server/api/endpoints/admin/show-user.ts
+++ b/packages/backend/src/server/api/endpoints/admin/show-user.ts
@ -17,6 +17,8 @@ export const meta = {
 	requireCredential: true,
 	requireModerator: true,

+	kind: 'read:admin',
+
 	res: {
 		type: 'object',
 		nullable: false, optional: false,