From 2dc8a8fbe92f9bfb82dcd7287d21ed594849696f Mon Sep 17 00:00:00 2001 From: "G.Ambatte" Date: Thu, 19 Dec 2024 16:20:04 +1300 Subject: [PATCH] Remove req.account from update request --- server/admin.api.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/server/admin.api.js b/server/admin.api.js index 02cdcb2f7..2febdfebb 100644 --- a/server/admin.api.js +++ b/server/admin.api.js @@ -108,6 +108,9 @@ router.put('/admin/clean/script/:id', asyncHandler(HomebrewAPI.getBrew('admin', req.body = brew; + // Remove Account from request to prevent Admin user from being added to brew as an Author + req.account = undefined; + return await HomebrewAPI.updateBrew(req, res); });