immich-app/devtools
1
0
Fork 0
mirror of https://github.com/immich-app/devtools.git synced 2026-09-30 21:27:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: block user deletes on demo instance (#1246)

Browse Source
This commit is contained in:
Daniel Dietzler
2026-01-06 13:53:39 +01:00
committed by GitHub
parent c95da37250
commit 3ed9ff0d32
1 changed files with 16 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kubernetes/apps/preview/demo/deployment/hr.yaml
+16 -6
View File
@@ -85,31 +85,41 @@ spec:
more_set_headers 'Access-Control-Allow-Credentials: false';
more_set_headers 'Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE';
more_set_headers 'Access-Control-Allow-Headers: x-immich-session-token, x-api-key, Authorization, Content-Type';
if ($request_method = 'OPTIONS') {
more_set_headers 'Access-Control-Max-Age: 3600';
more_set_headers 'Content-Type: text/plain charset=UTF-8';
more_set_headers 'Content-Length: 0';
return 204;
}
if ($request_method = PUT) {
set $block_put 1;
}
if ($uri ~ ^/api/(system-config|users/me|admin/users/.*|users/profile-image|assets/.*/original|auth/change-password)$) {
if ($uri ~ ^/api/(system-config|users/me|admin/users/.*|users/profile-image|assets/.*/original|auth/change-password)$) {
set $block_put "${block_put}1";
}
if ($block_put = 11) {
if ($block_put = 11) {
return 403;
}
if ($request_method = POST) {
set $block_post 1;
}
if ($uri ~ ^/api/(system-config|users/me|admin/maintenance|admin/users/.*|users/profile-image|assets|auth/change-password|notifications/test-email|libraries|trash/empty)$) {
if ($uri ~ ^/api/(system-config|users/me|admin/maintenance|admin/users/.*|users/profile-image|assets|auth/change-password|notifications/test-email|libraries|trash/empty)$) {
set $block_post "${block_post}1";
}
if ($block_post = 11) {
if ($block_post = 11) {
return 403;
}
if ($request_method = DELETE) {
set $block_delete 1;
}
if ($uri ~ ^/api/(admin/users/.*)$) {
set $block_delete "${block_post}1";
}
if ($block_delete = 11) {
return 403;
}