nixcn/cms-server
2
0
Fork 1
Code Pull Requests Activity

Fix attendance_list and stats allow lv40+ view info
Some checks failed
Server Check Build (NixCN CMS) TeamCity build failed
Details

Browse Source 
Signed-off-by: Asai Neko <sugar@sne.moe>
This commit is contained in:
Asai Neko
2026-03-28 13:11:38 +08:00
parent d187d8ef9a
commit 714b98cb1a
2 changed files with 52 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
service/service_event/attendance_list.go
View File

@@ -94,17 +94,34 @@ func (self *EventServiceImpl) AttendanceList(payload *AttendanceListPayload) (re
}
if eventData.Owner != payload.UserId {
exc := exception.New(
exception.WithStatus(exception.StatusUser),
exception.WithType(exception.TypeSpecific),
exception.WithOriginal(exception.EventAttendanceListError),
exception.WithError(errors.New("only the event owner may view the attendance list")),
).Throw(ctx)
callerData, err := new(data.User).GetByUserId(ctx, &payload.UserId)
if err != nil {
exc := exception.New(
exception.WithStatus(exception.StatusServer),
exception.WithType(exception.TypeCommon),
exception.WithOriginal(exception.CommonErrorDatabase),
exception.WithError(err),
).Throw(ctx)
result = &AttendanceListResult{
Common: shared.CommonResult{HttpCode: 403, Exception: exc},
result = &AttendanceListResult{
Common: shared.CommonResult{HttpCode: 500, Exception: exc},
}
return
}
if callerData == nil || callerData.PermissionLevel < 40 {
exc := exception.New(
exception.WithStatus(exception.StatusUser),
exception.WithType(exception.TypeSpecific),
exception.WithOriginal(exception.EventAttendanceListError),
exception.WithError(errors.New("only the event owner may view the attendance list")),
).Throw(ctx)
result = &AttendanceListResult{
Common: shared.CommonResult{HttpCode: 403, Exception: exc},
}
return
}
return
}
limit := 20

35
service/service_event/stats.go
View File

@@ -88,17 +88,34 @@ func (self *EventServiceImpl) Stats(payload *EventStatsPayload) (result *EventSt
}
if eventData.Owner != payload.UserId {
exc := exception.New(
exception.WithStatus(exception.StatusUser),
exception.WithType(exception.TypeSpecific),
exception.WithOriginal(exception.EventStatsNotOwner),
exception.WithError(errors.New("only the event owner may view event stats")),
).Throw(ctx)
callerData, err := new(data.User).GetByUserId(ctx, &payload.UserId)
if err != nil {
exc := exception.New(
exception.WithStatus(exception.StatusServer),
exception.WithType(exception.TypeCommon),
exception.WithOriginal(exception.CommonErrorDatabase),
exception.WithError(err),
).Throw(ctx)
result = &EventStatsResult{
Common: shared.CommonResult{HttpCode: 403, Exception: exc},
result = &EventStatsResult{
Common: shared.CommonResult{HttpCode: 500, Exception: exc},
}
return
}
if callerData == nil || callerData.PermissionLevel < 40 {
exc := exception.New(
exception.WithStatus(exception.StatusUser),
exception.WithType(exception.TypeSpecific),
exception.WithOriginal(exception.EventStatsNotOwner),
exception.WithError(errors.New("only the event owner may view event stats")),
).Throw(ctx)
result = &EventStatsResult{
Common: shared.CommonResult{HttpCode: 403, Exception: exc},
}
return
}
return
}
attRepo := new(data.Attendance)