list users require being admin

2023-10-07 06:00:38 +02:00
parent 9b75e33887
commit bfad05c438
1 changed files with 3 additions and 0 deletions
--- a/backend/windmill-api/src/users.rs
+++ b/backend/windmill-api/src/users.rs
@@ -717,6 +717,9 @@ async fn list_users(
    Extension(user_db): Extension<UserDB>,
    Path(w_id): Path<String>,
 ) -> JsonResult<Vec<UserWithUsage>> {
+    if *CLOUD_HOSTED && w_id == "demo" {
+        require_admin(authed.is_admin, &authed.username)?;
+    }
    let mut tx = user_db.begin(&authed).await?;
    let rows = sqlx::query(
        "