API: Fix null pointer in attempt to Sudo if not logged in (Backport g…

…o-gitea#5872) Signed-off-by: Andrew Thornton <art27@cantab.net>
zeripath · Jan 28, 2019 · 355698e · 355698e
1 parent d3a334d
commit 355698e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
@@ -85,7 +85,7 @@ func sudo() macaron.Handler {
 		}
 
 		if len(sudo) > 0 {
-			if ctx.User.IsAdmin {
+			if ctx.IsSigned && ctx.User.IsAdmin {
 				user, err := models.GetUserByName(sudo)
 				if err != nil {
 					if models.IsErrUserNotExist(err) {