github/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2026-09-07 12:40:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

🐛 Set proper exception type on notauthorized requests.

Browse Source
This commit is contained in:
Andrey Antukh 2021-01-19 11:29:56 +01:00 committed by Alonso Torres
parent 9805f8b9f2
commit af310854fc
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
backend/src/app/rpc/queries/files.clj
View File

@ -71,7 +71,7 @@
(when-not (or (some :can-edit rows) (when-not (or (some :can-edit rows)
(some :is-admin rows) (some :is-admin rows)
(some :is-owner rows)) (some :is-owner rows))
(ex/raise :type :validation (ex/raise :type :authorization
:code :not-authorized)))) :code :not-authorized))))
@ -82,7 +82,7 @@
file-id profile-id file-id profile-id
file-id profile-id])] file-id profile-id])]
(when-not (seq rows) (when-not (seq rows)
(ex/raise :type :validation (ex/raise :type :authorization
:code :not-authorized)))) :code :not-authorized))))

4
backend/src/app/rpc/queries/projects.clj
View File

@ -44,7 +44,7 @@
(when-not (or (some :can-edit rows) (when-not (or (some :can-edit rows)
(some :is-admin rows) (some :is-admin rows)
(some :is-owner rows)) (some :is-owner rows))
(ex/raise :type :validation (ex/raise :type :authorization
:code :not-authorized)))) :code :not-authorized))))
(defn check-read-permissions! (defn check-read-permissions!
@ -54,7 +54,7 @@
project-id profile-id])] project-id profile-id])]
(when-not (seq rows) (when-not (seq rows)
(ex/raise :type :validation (ex/raise :type :authorization
:code :not-authorized)))) :code :not-authorized))))

4
backend/src/app/rpc/queries/teams.clj
View File

@ -32,7 +32,7 @@
(when-not (or (:can-edit row) (when-not (or (:can-edit row)
(:is-admin row) (:is-admin row)
(:is-owner row)) (:is-owner row))
(ex/raise :type :validation (ex/raise :type :authorization
:code :not-authorized)) :code :not-authorized))
row)) row))
@ -41,7 +41,7 @@
(let [row (db/exec-one! conn [sql:team-permissions profile-id team-id])] (let [row (db/exec-one! conn [sql:team-permissions profile-id team-id])]
;; when row is found this means that read permission is granted. ;; when row is found this means that read permission is granted.
(when-not row (when-not row
(ex/raise :type :validation (ex/raise :type :authorization
:code :not-authorized)) :code :not-authorized))
row)) row))