rpdata/api
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

graph2: Changed story tagging permissions to allow anyone to tag open stories.
the build was successful
Details

Browse Source
This commit is contained in:
gisle
2019-01-12 11:38:19 +01:00
parent 1ea04f1577
commit e0b93c6b4b
1 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
graph2/queries/story.go
+12
View File
@@ -79,9 +79,15 @@ func (r *mutationResolver) AddStoryTag(ctx context.Context, input input.StoryTag
return models.Story{}, errors.New("Story not found") return models.Story{}, errors.New("Story not found")
} }
if story.Open {
if !token.Permitted("member") {
return models.Story{}, errors.New("You are not permitted to edit this story")
}
} else {
if !token.PermittedUser(story.Author, "member", "story.edit") { if !token.PermittedUser(story.Author, "member", "story.edit") {
return models.Story{}, errors.New("You are not permitted to edit this story") return models.Story{}, errors.New("You are not permitted to edit this story")
} }
}
story, err = stories.AddTag(story, input.Tag) story, err = stories.AddTag(story, input.Tag)
if err != nil { if err != nil {
@@ -101,9 +107,15 @@ func (r *mutationResolver) RemoveStoryTag(ctx context.Context, input input.Story
return models.Story{}, errors.New("Story not found") return models.Story{}, errors.New("Story not found")
} }
if story.Open {
if !token.Permitted("member") {
return models.Story{}, errors.New("You are not permitted to edit this story")
}
} else {
if !token.PermittedUser(story.Author, "member", "story.edit") { if !token.PermittedUser(story.Author, "member", "story.edit") {
return models.Story{}, errors.New("You are not permitted to edit this story") return models.Story{}, errors.New("You are not permitted to edit this story")
} }
}
story, err = stories.RemoveTag(story, input.Tag) story, err = stories.RemoveTag(story, input.Tag)
if err != nil { if err != nil {