When signups are prohibited, respond with HTTP 403

This commit is contained in:
Franz Liedke 2019-08-21 23:48:24 +02:00 committed by Daniël Klabbers
parent 22b32bd601
commit d08f851c0b

View File

@ -72,7 +72,7 @@ class RegisterUserHandler
$data = $command->data; $data = $command->data;
if (! $this->settings->get('allow_sign_up')) { if (! $this->settings->get('allow_sign_up')) {
$this->assertAdmin($actor); $this->assertPermission($actor->can('administrate'));
} }
$password = Arr::get($data, 'attributes.password'); $password = Arr::get($data, 'attributes.password');