nyne/nysoure
1
0
Fork 0
mirror of https://github.com/wgh136/nysoure.git synced 2025-12-16 15:51:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: Add admin permission check for resource image updates

Browse Source
This commit is contained in:
nyne
2025-11-17 21:01:06 +08:00
parent b811ca25c4
commit d118ad7d14
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
server/service/resource.go
View File

@@ -872,8 +872,12 @@ func UpdateResourceImage(uid, resourceID, oldImageID, newImageID uint) error {
return err
}
if resource.UserID != uid {
// 可以在这里添加管理员权限检查
isAdmin, err := CheckUserIsAdmin(uid)
if err != nil {
return err
}
if resource.UserID != uid && !isAdmin {
return model.NewUnAuthorizedError("You don't have permission to update this resource")
}