rpdata/api
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

graph2: Fixed chapter using story permissions.
the build was successful
Details

Browse Source
This commit is contained in:
gisle
2018-10-16 19:01:11 +02:00
parent 9fbdc767ad
commit b7d5059d60
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
graph2/queries/chapter.go
+3 -3
View File
@@ -28,7 +28,7 @@ func (r *mutationResolver) AddChapter(ctx context.Context, input input.ChapterAd
} }
token := auth.TokenFromContext(ctx) token := auth.TokenFromContext(ctx)
if !token.Authenticated() { if !token.Permitted("member", "story.add") {
return models.Chapter{}, errors.New("Unauthorized") return models.Chapter{}, errors.New("Unauthorized")
} }
@@ -55,7 +55,7 @@ func (r *mutationResolver) EditChapter(ctx context.Context, input input.ChapterE
} }
token := auth.TokenFromContext(ctx) token := auth.TokenFromContext(ctx)
if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "story.edit") { if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "chapter.edit") {
return models.Chapter{}, errors.New("Unauthorized") return models.Chapter{}, errors.New("Unauthorized")
} }
@@ -73,7 +73,7 @@ func (r *mutationResolver) RemoveChapter(ctx context.Context, input input.Chapte
} }
token := auth.TokenFromContext(ctx) token := auth.TokenFromContext(ctx)
if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "story.remove") { if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "chapter.remove") {
return models.Chapter{}, errors.New("Unauthorized") return models.Chapter{}, errors.New("Unauthorized")
} }