ami/tl-vikunja
1
0
Fork 0
Code Activity

Fix creating new things with a link share auth

Browse Source
This commit is contained in:
kolaente
2020-05-12 15:51:48 +02:00
parent cb095d70df
commit 4137d4aed2
3 changed files with 19 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
pkg/routes/api/v1/task_attachment.go
View File

@ -18,7 +18,6 @@ package v1
import (
"code.vikunja.io/api/pkg/models"
user2 "code.vikunja.io/api/pkg/user"
"code.vikunja.io/web/handler"
"github.com/labstack/echo/v4"
"net/http"
@ -46,11 +45,12 @@ func UploadTaskAttachment(c echo.Context) error {
}
// Rights check
user, err := user2.GetCurrentUser(c)
auth, err := GetAuthFromClaims(c)
if err != nil {
return handler.HandleHTTPError(err, c)
}
can, err := taskAttachment.CanCreate(user)
can, err := taskAttachment.CanCreate(auth)
if err != nil {
return handler.HandleHTTPError(err, c)
}
@ -83,7 +83,7 @@ func UploadTaskAttachment(c echo.Context) error {
}
defer f.Close()
err = ta.NewAttachment(f, file.Filename, uint64(file.Size), user)
err = ta.NewAttachment(f, file.Filename, uint64(file.Size), auth)
if err != nil {
r.Errors = append(r.Errors, handler.HandleHTTPError(err, c))
continue
@ -115,11 +115,11 @@ func GetTaskAttachment(c echo.Context) error {
}
// Rights check
user, err := user2.GetCurrentUser(c)
auth, err := GetAuthFromClaims(c)
if err != nil {
return handler.HandleHTTPError(err, c)
}
can, err := taskAttachment.CanRead(user)
can, err := taskAttachment.CanRead(auth)
if err != nil {
return handler.HandleHTTPError(err, c)
}

5
pkg/routes/api/v1/user_list.go
View File

@ -73,11 +73,12 @@ func ListUsersForList(c echo.Context) error {
}
list := models.List{ID: listID}
currentUser, err := user.GetCurrentUser(c)
auth, err := GetAuthFromClaims(c)
if err != nil {
return handler.HandleHTTPError(err, c)
}
canRead, err := list.CanRead(currentUser)
canRead, err := list.CanRead(auth)
if err != nil {
return handler.HandleHTTPError(err, c)
}