Mod permission middleware to only request database once

Signed-off-by: Asai Neko <sugar@sne.moe>

middleware/permission.go

@@ -9,6 +9,9 @@ import (
 
 func Permission(requiredLevel uint) gin.HandlerFunc {
 	return func(c *gin.Context) {
+		var permissionLevel uint
+		permissionLevelPrev, ok := c.Get("permission_level")
+		if !ok {
 			userIdOrig, ok := c.Get("user_id")
 			if !ok || userIdOrig.(string) == "" {
 				c.AbortWithStatusJSON(401, gin.H{"status": "missing user id"})
@@ -27,10 +30,17 @@ func Permission(requiredLevel uint) gin.HandlerFunc {
 				return
 			}
 
-		if userData.PermissionLevel < requiredLevel {
+			permissionLevel = userData.PermissionLevel
+			c.Set("permission_level", userData.PermissionLevel)
+		} else {
+			permissionLevel = permissionLevelPrev.(uint)
+		}
+
+		if permissionLevel < requiredLevel {
 			c.AbortWithStatusJSON(403, gin.H{"status": "permission denied"})
 			return
 		}
+
 		c.Next()
 	}
 }