steffo/greed
steffo/greed
1
Fork 0
mirror of https://github.com/Steffo99/greed.git synced 2024-11-27 16:14:19 +00:00
Code Activity

Prevent bypassing the requirement for certain privileges

Browse source
This commit is contained in:
Steffo 2022-11-19 17:05:23 +01:00
parent bb99472c84
commit fe751cb56d
Signed by: steffo
GPG key ID: 6965406171929D01
1 changed files with 15 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
worker.py
View file

@ -764,12 +764,12 @@ class Worker(threading.Thread):
[self.loc.get("menu_cash"), self.loc.get("menu_credit_card"), self.loc.get("menu_cancel")],
cancellable=True)
# If the user has selected the Cash option...
if selection == self.loc.get("menu_cash"):
if selection == self.loc.get("menu_cash") and self.cfg["Payments"]["Cash"]["enable_pay_with_cash"]:
# Go to the pay with cash function
self.bot.send_message(self.chat.id,
self.loc.get("payment_cash", user_cash_id=self.user.identifiable_str()))
# If the user has selected the Credit Card option...
elif selection == self.loc.get("menu_credit_card"):
elif selection == self.loc.get("menu_credit_card") and self.cfg["Payments"]["CreditCard"]["credit_card_token"]:
# Go to the pay with credit card function
self.__add_credit_cc()
# If the user has selected the Cancel option...
@ -922,34 +922,34 @@ class Worker(threading.Thread):
self.loc.get("menu_transactions"),
self.loc.get("menu_csv"),
self.loc.get("menu_edit_admins")])
# If the user has selected the Products option...
if selection == self.loc.get("menu_products"):
# If the user has selected the Products option and has the privileges to perform the action...
if selection == self.loc.get("menu_products") and self.admin.edit_products:
# Open the products menu
self.__products_menu()
# If the user has selected the Orders option...
elif selection == self.loc.get("menu_orders"):
# If the user has selected the Orders option and has the privileges to perform the action...
elif selection == self.loc.get("menu_orders") and self.admin.receive_orders:
# Open the orders menu
self.__orders_menu()
# If the user has selected the Transactions option...
elif selection == self.loc.get("menu_edit_credit"):
# If the user has selected the Transactions option and has the privileges to perform the action...
elif selection == self.loc.get("menu_edit_credit") and self.admin.create_transactions:
# Open the edit credit menu
self.__create_transaction()
# If the user has selected the User mode option...
# If the user has selected the User mode option and has the privileges to perform the action...
elif selection == self.loc.get("menu_user_mode"):
# Tell the user how to go back to admin menu
self.bot.send_message(self.chat.id, self.loc.get("conversation_switch_to_user_mode"))
# Start the bot in user mode
self.__user_menu()
# If the user has selected the Add Admin option...
elif selection == self.loc.get("menu_edit_admins"):
# If the user has selected the Add Admin option and has the privileges to perform the action...
elif selection == self.loc.get("menu_edit_admins") and self.admin.is_owner:
# Open the edit admin menu
self.__add_admin()
# If the user has selected the Transactions option...
elif selection == self.loc.get("menu_transactions"):
# If the user has selected the Transactions option and has the privileges to perform the action...
elif selection == self.loc.get("menu_transactions") and self.admin.create_transactions:
# Open the transaction pages
self.__transaction_pages()
# If the user has selected the .csv option...
elif selection == self.loc.get("menu_csv"):
# If the user has selected the .csv option and has the privileges to perform the action...
elif selection == self.loc.get("menu_csv") and self.admin.create_transactions:
# Generate the .csv file
self.__transactions_file()