totole/services
1
0
Fork 0
mirror of https://github.com/kevin-DL/services.git synced 2026-01-12 03:05:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix files service auth (#71)

Browse Source
This commit is contained in:
Janos Dobronszki
2021-02-22 09:49:35 +00:00
committed by GitHub
parent e677c40840
commit a453566c26
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
files/handler/files.go
View File

@@ -46,7 +46,8 @@ func (e *Files) Save(ctx context.Context, req *files.SaveRequest, rsp *files.Sav
if err != nil && err != model.ErrorNotFound {
return err
}
if f.Owner != acc.ID {
// if file exists check ownership
if f.Id != "" && f.Owner != acc.ID {
return errors.New("Not authorized")
}
err = e.db.Create(file)