[Web] create ratelimit acl on iam mbox creation

This commit is contained in:
FreddleSpl0it 2023-03-14 18:41:05 +01:00
parent fdbddb9f93
commit bc5e661ea1
No known key found for this signature in database
GPG Key ID: 00E14E7634F4BEC5
1 changed files with 1 additions and 1 deletions

View File

@ -92,7 +92,7 @@ function ratelimit($_action, $_scope, $_data = null) {
); );
continue; continue;
} }
if (!hasMailboxObjectAccess($_SESSION['mailcow_cc_username'], $_SESSION['mailcow_cc_role'], $object) if (!hasMailboxObjectAccess($_SESSION['mailcow_cc_username'], $_SESSION['mailcow_cc_role'], $object) && !$_SESSION['iam_create_login']
|| ($_SESSION['mailcow_cc_role'] != 'admin' && $_SESSION['mailcow_cc_role'] != 'domainadmin')) { || ($_SESSION['mailcow_cc_role'] != 'admin' && $_SESSION['mailcow_cc_role'] != 'domainadmin')) {
$_SESSION['return'][] = array( $_SESSION['return'][] = array(
'type' => 'danger', 'type' => 'danger',