themes: only check password for uid=0 pages, nobody cannot read shadow (#426)

[project/luci.git] / themes / openwrt / luasrc / view / themes / openwrt.org / header.htm

diff --git a/themes/openwrt/luasrc/view/themes/openwrt.org/header.htm b/themes/openwrt/luasrc/view/themes/openwrt.org/header.htm
index ddd960401c469950b4d2e06d9f12617fd7862801..3db844570d604f6e1469afadaa454cbb9f64dcf2 100644 (file)
--- a/themes/openwrt/luasrc/view/themes/openwrt.org/header.htm
+++ b/themes/openwrt/luasrc/view/themes/openwrt.org/header.htm
@@ -173,7 +173,7 @@ if tree.nodes[category] and tree.nodes[category].ucidata then
                        </div>
                </noscript>
 
-               <%- if luci.sys.user.getuser("root") and not luci.sys.user.getpasswd("root") then -%>
+               <%- if luci.sys.process.info("uid") == 0 and luci.sys.user.getuser("root") and not luci.sys.user.getpasswd("root") then -%>
                <div class="errorbox">
                        <strong><%:No password set!%></strong><br />
                        <%:There is no password set on this router. Please configure a root password to protect the web interface and enable SSH.%><br />