teach/atsebay.t
Archived
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow access to work/:wid to users
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
nemunaire 2022-07-11 18:33:57 +02:00
parent 5a6390e9a5
commit 9dfc72e099
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
works.go
View File

@ -72,10 +72,16 @@ func init() {
return formatApiResponse(NewWork(new.Title, new.Promo, new.Group, new.Shown, new.SubmissionURL, new.StartAvailability, new.EndAvailability))
}, adminRestricted))
router.GET("/api/works/:wid", apiHandler(workHandler(
func(w Work, _ []byte) HTTPResponse {
return APIResponse{w}
}), adminRestricted))
router.GET("/api/works/:wid", apiAuthHandler(workAuthHandler(
func(w Work, u *User, _ []byte) HTTPResponse {
if u.IsAdmin {
return APIResponse{w}
} else if w.Shown && w.StartAvailability.Before(time.Now()) && (w.Group == "" || strings.Contains(u.Groups, ","+w.Group+",")) {
return APIResponse{w}
} else {
return APIErrorResponse{status: http.StatusForbidden, err: fmt.Errorf("Permission denied")}
}
}), loggedUser))
router.PUT("/api/works/:wid", apiHandler(workHandler(func(current Work, body []byte) HTTPResponse {
var new Work
if err := json.Unmarshal(body, &new); err != nil {