From 1d80281ef712efec47de013e968486385815c9f6 Mon Sep 17 00:00:00 2001
From: Eldad Fux <eldad.fux@gmail.com>
Date: Mon, 11 Jan 2021 23:52:05 +0200
Subject: [PATCH] Disable ratelimits

---
 app/controllers/shared/api.php | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/app/controllers/shared/api.php b/app/controllers/shared/api.php
index d64c46a2cd..4dc69b7850 100644
--- a/app/controllers/shared/api.php
+++ b/app/controllers/shared/api.php
@@ -1,5 +1,7 @@
 <?php
 
+use Appwrite\Auth\Auth;
+use Appwrite\Database\Validator\Authorization;
 use Utopia\App;
 use Utopia\Exception;
 use Utopia\Abuse\Abuse;
@@ -49,7 +51,13 @@ App::init(function ($utopia, $request, $response, $project, $user, $register) {
         ;
     }
 
-    if ($abuse->check() && App::getEnv('_APP_OPTIONS_ABUSE', 'enabled') !== 'disabled') {
+    $isPreviliggedUser = Auth::isPreviliggedUser(Authorization::$roles);
+    $isAppUser = Auth::isAppUser(Authorization::$roles);
+
+    if (($abuse->check() // Route is rate-limited
+        && App::getEnv('_APP_OPTIONS_ABUSE', 'enabled') !== 'disabled') // Abuse is not diabled
+        && (!$isAppUser && !$isPreviliggedUser)) // User is not an admin or API key
+        {
         throw new Exception('Too many requests', 429);
     }
 }, ['utopia', 'request', 'response', 'project', 'user', 'register'], 'api');
\ No newline at end of file