Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
b7d5059d60 | ||
|
|
9fbdc767ad | ||
|
|
daeaaf5fa9 |
@@ -81,7 +81,7 @@ func main() {
|
|||||||
}
|
}
|
||||||
|
|
||||||
category := models.StoryCategory(result.Category)
|
category := models.StoryCategory(result.Category)
|
||||||
if category.IsValid() {
|
if !category.IsValid() {
|
||||||
log.Println(result.Name, "does not have a valid category:", result.Category)
|
log.Println(result.Name, "does not have a valid category:", result.Category)
|
||||||
continue
|
continue
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -28,7 +28,7 @@ func (r *mutationResolver) AddChapter(ctx context.Context, input input.ChapterAd
|
|||||||
}
|
}
|
||||||
|
|
||||||
token := auth.TokenFromContext(ctx)
|
token := auth.TokenFromContext(ctx)
|
||||||
if !token.Authenticated() {
|
if !token.Permitted("member", "story.add") {
|
||||||
return models.Chapter{}, errors.New("Unauthorized")
|
return models.Chapter{}, errors.New("Unauthorized")
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -55,7 +55,7 @@ func (r *mutationResolver) EditChapter(ctx context.Context, input input.ChapterE
|
|||||||
}
|
}
|
||||||
|
|
||||||
token := auth.TokenFromContext(ctx)
|
token := auth.TokenFromContext(ctx)
|
||||||
if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "story.edit") {
|
if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "chapter.edit") {
|
||||||
return models.Chapter{}, errors.New("Unauthorized")
|
return models.Chapter{}, errors.New("Unauthorized")
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -73,7 +73,7 @@ func (r *mutationResolver) RemoveChapter(ctx context.Context, input input.Chapte
|
|||||||
}
|
}
|
||||||
|
|
||||||
token := auth.TokenFromContext(ctx)
|
token := auth.TokenFromContext(ctx)
|
||||||
if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "story.remove") {
|
if !token.Authenticated() || !token.PermittedUser(chapter.Author, "member", "chapter.remove") {
|
||||||
return models.Chapter{}, errors.New("Unauthorized")
|
return models.Chapter{}, errors.New("Unauthorized")
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -19,6 +19,7 @@ func Ensure(id string) (models.User, error) {
|
|||||||
"log.edit",
|
"log.edit",
|
||||||
"post.edit",
|
"post.edit",
|
||||||
"post.move",
|
"post.move",
|
||||||
|
"post.remove",
|
||||||
"file.upload",
|
"file.upload",
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user