fixes:

returning Forbidden in place of Conflict, superuser not need to be cheched in hasAnyPermission()
racostas · Apr 24, 2024 · 77cd3ff · 77cd3ff
1 parent e94920d
commit 77cd3ff
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/modules/examiner/php/addexaminer.class.inc b/modules/examiner/php/addexaminer.class.inc
@@ -68,13 +68,12 @@ class AddExaminer extends \NDB_Page
         $user = \User::singleton();
         if (!$user->hasAnyPermission(
             [
-                'superuser',
-                'examiner_multisite',
+                'examiner_multisite'
             ]
         )
             && !in_array($siteID, $user->getCenterIDs())
         ) {
-            return  new \LORIS\Http\Response\JSON\Conflict(
+            return new \LORIS\Http\Response\JSON\Forbidden(
                 'Permission denied: You cannot assign examiner to this Site.'
             );
         };