Users with admin-access-control-permissions RW are no longer able to change superuser permissions.

2026-05-16 23:47:20 +02:00
parent 38f8584ecf
commit f4cd8e9cde
5 changed files with 30 additions and 7 deletions
--- a/pub/api/classes/API.php
+++ b/pub/api/classes/API.php
@@ -688,7 +688,7 @@ class API

    protected function buildDynamicQuery(string $tableName): array
    {
-        unset($this->baseQuery);
+        $this->baseQuery = '';
        if (!$this->baseQuery) {
            $this->baseQuery = "SELECT * FROM " . $tableName;
        }