nixcn/cms-server
1
0
Fork 1
Code Pull Requests Activity

First merge from develop to main (WIP) #7

Merged
sugar merged 199 commits from develop into main 2026-01-27 17:47:07 +00:00
Conversation 0 Commits 199 Files Changed 228 +27 -17
1 changed files with 27 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 0f1c8e327e - Show all commits

12
middleware/permission.go
View File

@@ -9,6 +9,9 @@ import (
func Permission(requiredLevel uint) gin.HandlerFunc { func Permission(requiredLevel uint) gin.HandlerFunc {
return func(c *gin.Context) { return func(c *gin.Context) {
var permissionLevel uint
permissionLevelPrev, ok := c.Get("permission_level")
if !ok {
userIdOrig, ok := c.Get("user_id") userIdOrig, ok := c.Get("user_id")
if !ok || userIdOrig.(string) == "" { if !ok || userIdOrig.(string) == "" {
c.AbortWithStatusJSON(401, gin.H{"status": "missing user id"}) c.AbortWithStatusJSON(401, gin.H{"status": "missing user id"})
@@ -27,10 +30,17 @@ func Permission(requiredLevel uint) gin.HandlerFunc {
return return
} }
if userData.PermissionLevel < requiredLevel { permissionLevel = userData.PermissionLevel
c.Set("permission_level", userData.PermissionLevel)
} else {
permissionLevel = permissionLevelPrev.(uint)
}
if permissionLevel < requiredLevel {
c.AbortWithStatusJSON(403, gin.H{"status": "permission denied"}) c.AbortWithStatusJSON(403, gin.H{"status": "permission denied"})
return return
} }
c.Next() c.Next()
} }
} }