feat(api tokens): check permissions when saving

2023-09-01 08:52:57 +02:00
parent e4c71123ef
commit e3dac16398
4 changed files with 85 additions and 10 deletions
--- a/pkg/models/api_tokens.go
+++ b/pkg/models/api_tokens.go
@ -102,7 +102,9 @@ func (t *APIToken) Create(s *xorm.Session, a web.Auth) (err error) {

 	t.OwnerID = a.GetID()

-	// TODO: validate permissions
+	if err := PermissionsAreValid(t.Permissions); err != nil {
+		return err
+	}

 	_, err = s.Insert(t)
 	return err