mirror of
https://github.com/wgh136/nysoure.git
synced 2025-12-16 07:51:14 +00:00
feat: Add admin permission check for resource image updates
This commit is contained in:
@@ -872,8 +872,12 @@ func UpdateResourceImage(uid, resourceID, oldImageID, newImageID uint) error {
|
|||||||
return err
|
return err
|
||||||
}
|
}
|
||||||
|
|
||||||
if resource.UserID != uid {
|
isAdmin, err := CheckUserIsAdmin(uid)
|
||||||
// 可以在这里添加管理员权限检查
|
if err != nil {
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
|
||||||
|
if resource.UserID != uid && !isAdmin {
|
||||||
return model.NewUnAuthorizedError("You don't have permission to update this resource")
|
return model.NewUnAuthorizedError("You don't have permission to update this resource")
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user