We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent dee46ea commit aaa88baCopy full SHA for aaa88ba
selfservice/blueprints/recovery.py
@@ -256,8 +256,8 @@ def admin():
256
"""
257
Allow RTPs to create reset tokens for accounts.
258
259
- if "rtp" not in flask_session["userinfo"].get("groups"):
260
- flash("Nice try. 😉 " + ', '.join(flask_session["userinfo"].get("groups")))
+ if "/admins/rtp" not in flask_session["userinfo"].get("groups"):
+ flash("Nice try. 😉 ")
261
return redirect("/recovery")
262
263
if request.method == "GET":
0 commit comments