From 7c96a12a3ca2b9e1093b770dda84e067a9938251 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?dni=20=E2=9A=A1?= <office@dnilabs.com>
Date: Thu, 22 Dec 2022 17:48:46 +0100
Subject: [PATCH] fix issue with allowed_users and admin/superuser

---
 lnbits/decorators.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lnbits/decorators.py b/lnbits/decorators.py
index e5bc13991..dea0a54b6 100644
--- a/lnbits/decorators.py
+++ b/lnbits/decorators.py
@@ -236,8 +236,8 @@ async def check_user_exists(usr: UUID4) -> User:
     if (
         len(settings.lnbits_allowed_users) > 0
         and g().user.id not in settings.lnbits_allowed_users
-        and g().user.id != settings.super_user
-        and g().user.id not in settings.lnbits_admin_users
+        or g().user.id != settings.super_user
+        or g().user.id not in settings.lnbits_admin_users
     ):
         raise HTTPException(
             status_code=HTTPStatus.UNAUTHORIZED, detail="User not authorized."