Guard admin assignment/removal against empty filter

This commit is contained in:
KuhnChris
2026-01-08 23:09:18 +01:00
committed by Jason Volk
parent 5e532593fa
commit 76c09851ea

View File

@@ -60,6 +60,8 @@ pub(super) async fn ldap_login(
.await?; .await?;
} }
// only perform admin add/remove check if admin_filter is set
if !services.config.ldap.admin_filter.is_empty() {
let is_tuwunel_admin = services let is_tuwunel_admin = services
.admin .admin
.user_is_admin(lowercased_user_id) .user_is_admin(lowercased_user_id)
@@ -77,6 +79,7 @@ pub(super) async fn ldap_login(
.revoke_admin(lowercased_user_id) .revoke_admin(lowercased_user_id)
.await?; .await?;
} }
}
Ok(user_id) Ok(user_id)
} }