Fixes IDOR: the endpoint was publicly accessible to any authenticated user. Now requires ADMIN_USER permission, matching all other user management endpoints. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
8 lines
210 B
Svelte
8 lines
210 B
Svelte
<script lang="ts">
|
|
import { m } from '$lib/paraglide/messages.js';
|
|
</script>
|
|
|
|
<div class="flex flex-1 items-center justify-center p-8">
|
|
<p class="text-sm text-ink-3">{m.admin_users_select_prompt()}</p>
|
|
</div>
|