totole/services
1
0
Fork 0
mirror of https://github.com/kevin-DL/services.git synced 2026-01-20 14:35:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix files service auth (#71)

Browse Source
This commit is contained in:
Janos Dobronszki
2021-02-22 09:49:35 +00:00
committed by GitHub
parent e677c40840
commit a453566c26
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
files/handler/files.go
View File

@@ -46,7 +46,8 @@ func (e *Files) Save(ctx context.Context, req *files.SaveRequest, rsp *files.Sav
if err != nil && err != model.ErrorNotFound { if err != nil && err != model.ErrorNotFound {
return err return err
} }
if f.Owner != acc.ID { // if file exists check ownership
if f.Id != "" && f.Owner != acc.ID {
return errors.New("Not authorized") return errors.New("Not authorized")
} }
err = e.db.Create(file) err = e.db.Create(file)