core/oc-lib
6
0
Fork 0
Code Issues 7 Pull Requests Packages Projects Releases Wiki Activity

CanUpdate

Browse Source
This commit is contained in:
mr
2026-03-21 15:08:01 +01:00
parent 88d2e52628
commit b82b955045
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
models/utils/common.go
View File

@@ -100,9 +100,12 @@ func ModelGenericUpdateOne(change map[string]interface{}, id string, a Accessor)
obj := a.NewObj() obj := a.NewObj()
b, _ := json.Marshal(r) b, _ := json.Marshal(r)
json.Unmarshal(b, obj) json.Unmarshal(b, obj)
ok, r := r.CanUpdate(obj) if !a.GetRequest().Admin {
if !ok { var ok bool
return nil, nil, 403, errors.New("you are not allowed to update :" + a.GetType().String()) ok, r = r.CanUpdate(obj)
if !ok {
return nil, nil, 403, errors.New("you are not allowed to update :" + a.GetType().String())
}
} }
r.UpToDate(a.GetUser(), a.GetPeerID(), false) r.UpToDate(a.GetUser(), a.GetPeerID(), false)
if a.GetPeerID() == r.GetCreatorID() { if a.GetPeerID() == r.GetCreatorID() {