Penpot/penpot
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-04-06 12:01:19 -05:00
Code Issues Activity

🐛 Set proper exception type on notauthorized requests.

Browse source
This commit is contained in:
Andrey Antukh 2021-01-19 11:29:56 +01:00 • committed by Alonso Torres
parent 9805f8b9f2
commit af310854fc
3 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
backend/src/app/rpc/queries/files.clj
View file

@ -71,7 +71,7 @@
(when-not (or (some :can-edit rows)
(some :is-admin rows)
(some :is-owner rows))
(ex/raise :type :validation
(ex/raise :type :authorization
:code :not-authorized))))
@ -82,7 +82,7 @@
file-id profile-id
file-id profile-id])]
(when-not (seq rows)
(ex/raise :type :validation
(ex/raise :type :authorization
:code :not-authorized))))

4
backend/src/app/rpc/queries/projects.clj
View file

@ -44,7 +44,7 @@
(when-not (or (some :can-edit rows)
(some :is-admin rows)
(some :is-owner rows))
(ex/raise :type :validation
(ex/raise :type :authorization
:code :not-authorized))))
(defn check-read-permissions!
@ -54,7 +54,7 @@
project-id profile-id])]
(when-not (seq rows)
(ex/raise :type :validation
(ex/raise :type :authorization
:code :not-authorized))))

4
backend/src/app/rpc/queries/teams.clj
View file

@ -32,7 +32,7 @@
(when-not (or (:can-edit row)
(:is-admin row)
(:is-owner row))
(ex/raise :type :validation
(ex/raise :type :authorization
:code :not-authorized))
row))
@ -41,7 +41,7 @@
(let [row (db/exec-one! conn [sql:team-permissions profile-id team-id])]
;; when row is found this means that read permission is granted.
(when-not row
(ex/raise :type :validation
(ex/raise :type :authorization
:code :not-authorized))
row))