From 9327a27d36f4e43e34a2affa2e99f930b05bb073 Mon Sep 17 00:00:00 2001 From: Guangcong Luo Date: Thu, 18 Nov 2021 23:05:19 -0500 Subject: [PATCH] Fix bug in user admin panel Probably one day we should investigate why group numbers are strings but also probably our solution will be to switch to TypeScript. --- website/users.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/users.php b/website/users.php index 9bc7a5e0c..e0d76cd14 100644 --- a/website/users.php +++ b/website/users.php @@ -180,7 +180,7 @@ if (!$user) { if ($authLevel >= 4 && substr($user['email'] ?? '', -1) === '@') echo '[2FA]'; - $canChangeGroup = $user['group'] === 2 ? $authLevel >= 10 : $authLevel >= 3; + $canChangeGroup = $user['group'] == 2 ? $authLevel >= 10 : $authLevel >= 3; if ($user['group'] && $canChangeGroup) { $csrfOk = (!!$users->csrfCheck() && $authLevel >= 4);