diff --git a/src/socket.io/admin.js b/src/socket.io/admin.js index bec2f0fae9..0cd8b3d452 100644 --- a/src/socket.io/admin.js +++ b/src/socket.io/admin.js @@ -41,7 +41,7 @@ SocketAdmin.before = async function (socket, method) { } // Check admin privileges mapping (if not in mapping, deny access) - const privilegeSet = privileges.admin.socketMap[method].split(';'); + const privilegeSet = privileges.admin.socketMap.hasOwnProperty(method) ? privileges.admin.socketMap[method].split(';') : []; const hasPrivilege = (await Promise.all(privilegeSet.map(async privilege => privileges.admin.can(privilege, socket.uid)))).some(Boolean); if (privilegeSet.length && hasPrivilege) { return;