fix(security): only Super Admins can reboot the server (#12100)

botpress · Aug 25, 2022 · 39e2e0f · 39e2e0f
1 parent fc41607
commit 39e2e0f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/packages/bp/src/admin/management/management-router.ts b/packages/bp/src/admin/management/management-router.ts
@@ -71,6 +71,7 @@ class ManagementRouter extends CustomAdminRouter {
 
     this.router.post(
       '/rebootServer',
+      assertSuperAdmin,
       this.asyncMiddleware(async (req, res) => {
         const user = req.tokenUser!.email
         const config = await this.configProvider.getBotpressConfig()