Close the add-path route around the platform-admin lockout guard

FixSecurityService
Ya
15 Agosti 2026, 01:27 UTC
Mwandishi
Kamo
Ahadi ya
5d8549f

POST replaces an existing administrator's rights, so it can take them away as well as give them — but only the PUT and DELETE paths checked whether the edit would leave nobody able to manage the list. Re-adding the last MANAGE_PLATFORM_ADMINS holder with an empty set was a way around the rule the console shows you, and the recovery from it is a database session.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei