llvy.ltd/casdoor
1
0
Fork 0
mirror of https://github.com/casdoor/casdoor.git synced 2025-05-23 02:35:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat: add requireProviderPermission()

Browse Source
This commit is contained in:
Yang Luo 2024-03-30 23:24:59 +08:00
parent eb448bd043
commit fb6f3623ee
1 changed files with 22 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
controllers/provider.go
View File

@ -141,6 +141,20 @@ func (c *ApiController) GetProvider() {
c.ResponseOk(object.GetMaskedProvider(provider, isMaskEnabled))
}
func (c *ApiController) requireProviderPermission(provider *object.Provider) bool {
isGlobalAdmin, user := c.isGlobalAdmin()
if isGlobalAdmin {
return true
}
if provider.Owner == "admin" || user.Owner != provider.Owner {
c.ResponseError(c.T("auth:Unauthorized operation"))
return false
}
return true
}
// UpdateProvider
// @Title UpdateProvider
// @Tag Provider API
@ -159,13 +173,8 @@ func (c *ApiController) UpdateProvider() {
return
}
isGlobalAdmin, user := c.isGlobalAdmin()
if provider.Owner == "admin" && !isGlobalAdmin {
c.ResponseError("no permission")
return
} else if !isGlobalAdmin && user.Owner != provider.Owner {
c.ResponseError("no permission")
ok := c.requireProviderPermission(&provider)
if !ok {
return
}
@ -194,18 +203,14 @@ func (c *ApiController) AddProvider() {
return
}
if err := checkQuotaForProvider(int(count)); err != nil {
err = checkQuotaForProvider(int(count))
if err != nil {
c.ResponseError(err.Error())
return
}
isGlobalAdmin, user := c.isGlobalAdmin()
if provider.Owner == "admin" && !isGlobalAdmin {
c.ResponseError("no permission")
return
} else if !isGlobalAdmin && user.Owner != provider.Owner {
c.ResponseError("no permission")
ok := c.requireProviderPermission(&provider)
if !ok {
return
}
@ -228,13 +233,8 @@ func (c *ApiController) DeleteProvider() {
return
}
isGlobalAdmin, user := c.isGlobalAdmin()
if provider.Owner == "admin" && !isGlobalAdmin {
c.ResponseError("no permission")
return
} else if !isGlobalAdmin && user.Owner != provider.Owner {
c.ResponseError("no permission")
ok := c.requireProviderPermission(&provider)
if !ok {
return
}